13245 lines
2.9 MiB
13245 lines
2.9 MiB
# Title: Phishing URL Snort3 Ruleset
|
|
# Updated: Tue, 28 Jun 2022 00:01:55 +0000
|
|
# Expires: 1 day (update frequency)
|
|
# Homepage: https://gitlab.com/curben/phishing-filter
|
|
# License: https://gitlab.com/curben/phishing-filter#license
|
|
# Source: https://www.phishtank.com/ & https://openphish.com/
|
|
|
|
# Notice: https://curben.gitlab.io/phishing-filter-mirror is moved to https://curben.gitlab.io/malware-filter
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"000prhr.weebly.com",nocase; classtype:attempted-recon; sid:200000001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"005spk-id-online.de",nocase; classtype:attempted-recon; sid:200000002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"006spk-id-web.de",nocase; classtype:attempted-recon; sid:200000003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"01-spk-idserv.de",nocase; classtype:attempted-recon; sid:200000004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"012678.xyz",nocase; classtype:attempted-recon; sid:200000005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0310f955.sibforms.com",nocase; classtype:attempted-recon; sid:200000006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"033spk-id-web.de",nocase; classtype:attempted-recon; sid:200000007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"03829gh.byethost3.com",nocase; classtype:attempted-recon; sid:200000008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"08863299.sso-secure-mail0454etr.pages.dev",nocase; classtype:attempted-recon; sid:200000009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0b311595a89464914.temporary.link",nocase; classtype:attempted-recon; sid:200000010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0bebe76d.sibforms.com",nocase; classtype:attempted-recon; sid:200000011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0pensea.com",nocase; classtype:attempted-recon; sid:200000012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0range.godaddysites.com",nocase; classtype:attempted-recon; sid:200000013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-docdrive-sharep01nt.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-docdrive-sharep01nt.web.app",nocase; classtype:attempted-recon; sid:200000015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-docdrive-sharep01ntt.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-docdrive-sharep01ntt.web.app",nocase; classtype:attempted-recon; sid:200000017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-0.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-0.web.app",nocase; classtype:attempted-recon; sid:200000019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-1rd.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-1rd.web.app",nocase; classtype:attempted-recon; sid:200000021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-1st.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-1st.web.app",nocase; classtype:attempted-recon; sid:200000023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-2nd.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-2nd.web.app",nocase; classtype:attempted-recon; sid:200000025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-rd.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-rd.web.app",nocase; classtype:attempted-recon; sid:200000027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-red.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-red.web.app",nocase; classtype:attempted-recon; sid:200000029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-st.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-st.web.app",nocase; classtype:attempted-recon; sid:200000031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-stor3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-stor3.web.app",nocase; classtype:attempted-recon; sid:200000033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-stor3s.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0ut100k-shar3-p01nt-stor3s.web.app",nocase; classtype:attempted-recon; sid:200000035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0vq4v.hyperphp.com",nocase; classtype:attempted-recon; sid:200000036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"0web.pages.dev",nocase; classtype:attempted-recon; sid:200000037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"101.66.242.191",nocase; classtype:attempted-recon; sid:200000038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"103-219-154-102.cprapid.com",nocase; classtype:attempted-recon; sid:200000039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"103.11.153.184",nocase; classtype:attempted-recon; sid:200000040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"103.157.253.194",nocase; classtype:attempted-recon; sid:200000041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"103.219.154.102",nocase; classtype:attempted-recon; sid:200000042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"104.168.173.244",nocase; classtype:attempted-recon; sid:200000043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"104.168.173.248",nocase; classtype:attempted-recon; sid:200000044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"104.46.126.111",nocase; classtype:attempted-recon; sid:200000045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"10dimensions.web3d-studio.co.il",nocase; classtype:attempted-recon; sid:200000046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"10e20o30u37.260mb.net",nocase; classtype:attempted-recon; sid:200000047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1111365.net",nocase; classtype:attempted-recon; sid:200000048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1111365.vip",nocase; classtype:attempted-recon; sid:200000049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1111365585547384.com",nocase; classtype:attempted-recon; sid:200000050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859220.web.id",nocase; classtype:attempted-recon; sid:200000051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859221.web.id",nocase; classtype:attempted-recon; sid:200000052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859222.web.id",nocase; classtype:attempted-recon; sid:200000053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859223.web.id",nocase; classtype:attempted-recon; sid:200000054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859224.web.id",nocase; classtype:attempted-recon; sid:200000055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859225.web.id",nocase; classtype:attempted-recon; sid:200000056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859227.web.id",nocase; classtype:attempted-recon; sid:200000057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859228.web.id",nocase; classtype:attempted-recon; sid:200000058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859229.web.id",nocase; classtype:attempted-recon; sid:200000059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859233.web.id",nocase; classtype:attempted-recon; sid:200000060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859235.web.id",nocase; classtype:attempted-recon; sid:200000061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"11126897531859236.web.id",nocase; classtype:attempted-recon; sid:200000062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"112358400702021.my.id",nocase; classtype:attempted-recon; sid:200000063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"12-123movies.com",nocase; classtype:attempted-recon; sid:200000064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"120901805221826-am.web.id",nocase; classtype:attempted-recon; sid:200000065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"121.40.83.145",nocase; classtype:attempted-recon; sid:200000066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"121d132df123d.obs.ap-southeast-2.myhuaweicloud.com",nocase; classtype:attempted-recon; sid:200000067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"121techyard.com",nocase; classtype:attempted-recon; sid:200000068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"123provolded3by3.435543641.xyz",nocase; classtype:attempted-recon; sid:200000069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"128787831go.webcindario.com",nocase; classtype:attempted-recon; sid:200000070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"140ameritech1440bih741sxsrfaliczsbiltaffseluqy2a.weebly.com",nocase; classtype:attempted-recon; sid:200000071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"142.11.214.173",nocase; classtype:attempted-recon; sid:200000072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"143li.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"14703.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"147mp.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"149-210-143-165.colo.transip.net",nocase; classtype:attempted-recon; sid:200000076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"149.210.143.165",nocase; classtype:attempted-recon; sid:200000077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"14cef.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"14dft.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"14gqb.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"14jlr.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"14l2h.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"14t4z.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"14wl4.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1501y.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"151sj.trk.elasticemail.com",nocase; classtype:attempted-recon; sid:200000086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"153in.net",nocase; classtype:attempted-recon; sid:200000087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1545684infoupadate.co.vu",nocase; classtype:attempted-recon; sid:200000088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"15c5nu5htdl.typeform.com",nocase; classtype:attempted-recon; sid:200000089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"161.35.142.2",nocase; classtype:attempted-recon; sid:200000090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"162.241.140.164",nocase; classtype:attempted-recon; sid:200000091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"162.248.49.232",nocase; classtype:attempted-recon; sid:200000092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"163-1ew.pages.dev",nocase; classtype:attempted-recon; sid:200000093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"164.92.96.232",nocase; classtype:attempted-recon; sid:200000094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"165.227.194.222",nocase; classtype:attempted-recon; sid:200000095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"167.71.45.12",nocase; classtype:attempted-recon; sid:200000096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"168.100.9.219",nocase; classtype:attempted-recon; sid:200000097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"169874.com",nocase; classtype:attempted-recon; sid:200000098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"179.48.65.130",nocase; classtype:attempted-recon; sid:200000099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"180110116028.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"186.75.130.46",nocase; classtype:attempted-recon; sid:200000101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"190854.8b.io",nocase; classtype:attempted-recon; sid:200000102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"198.148.100.124",nocase; classtype:attempted-recon; sid:200000103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1991024814.co.vu",nocase; classtype:attempted-recon; sid:200000104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"19910248152211.co.vu",nocase; classtype:attempted-recon; sid:200000105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1cictizenreactivate-secureathorized.authorizeddns.us",nocase; classtype:attempted-recon; sid:200000106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1inch-connect.com",nocase; classtype:attempted-recon; sid:200000107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1inch-io-stage-app-euc1.s3-website.eu-central-1.amazonaws.com",nocase; classtype:attempted-recon; sid:200000108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1inch.cryptobro.top",nocase; classtype:attempted-recon; sid:200000109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1inchcoin.com",nocase; classtype:attempted-recon; sid:200000110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1pa278g346q7n89yh3ru.co.vu",nocase; classtype:attempted-recon; sid:200000111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2.136.95.251",nocase; classtype:attempted-recon; sid:200000112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20-68-161-163.cprapid.com",nocase; classtype:attempted-recon; sid:200000113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20-90-19-28.cprapid.com",nocase; classtype:attempted-recon; sid:200000114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.211.45.128",nocase; classtype:attempted-recon; sid:200000115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.226.12.65",nocase; classtype:attempted-recon; sid:200000116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.230.161.124",nocase; classtype:attempted-recon; sid:200000117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.238.96.163",nocase; classtype:attempted-recon; sid:200000118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.246.80.192",nocase; classtype:attempted-recon; sid:200000119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.84.57.2",nocase; classtype:attempted-recon; sid:200000120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20.92.229.155",nocase; classtype:attempted-recon; sid:200000121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"208.82.115.230",nocase; classtype:attempted-recon; sid:200000122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20887-3575.s1.webspace.re",nocase; classtype:attempted-recon; sid:200000123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"210.22.85.94",nocase; classtype:attempted-recon; sid:200000124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"217651.8b.io",nocase; classtype:attempted-recon; sid:200000125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"24611250.sibforms.com",nocase; classtype:attempted-recon; sid:200000126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"25849684page-recovery-identity2022.ga",nocase; classtype:attempted-recon; sid:200000127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"25849684page-recovery-identity2022.gq",nocase; classtype:attempted-recon; sid:200000128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2654646500-infopagesupport.tk",nocase; classtype:attempted-recon; sid:200000129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"299kensingtonroad.my.webex.com",nocase; classtype:attempted-recon; sid:200000130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2bl.co.rs",nocase; classtype:attempted-recon; sid:200000131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2f6adb96.sibforms.com",nocase; classtype:attempted-recon; sid:200000132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2fa.bthei.com",nocase; classtype:attempted-recon; sid:200000133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2ha-group.com",nocase; classtype:attempted-recon; sid:200000134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2records-forwardtv.logonno4.co.pl",nocase; classtype:attempted-recon; sid:200000135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2wyslijpaczkeip389184.xyz",nocase; classtype:attempted-recon; sid:200000136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2x8a5c7q8a6w4r7.c1.biz",nocase; classtype:attempted-recon; sid:200000137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"30d8b083.sibforms.com",nocase; classtype:attempted-recon; sid:200000138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"30minute-reward.com",nocase; classtype:attempted-recon; sid:200000139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3183df04.sibforms.com",nocase; classtype:attempted-recon; sid:200000140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"346jnw4s46s35h2wty.ga",nocase; classtype:attempted-recon; sid:200000141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"34738543833hg5566.com",nocase; classtype:attempted-recon; sid:200000142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"34839783344hg5566.com",nocase; classtype:attempted-recon; sid:200000143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"35.192.38.184",nocase; classtype:attempted-recon; sid:200000144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"365xx365.com",nocase; classtype:attempted-recon; sid:200000145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"382685371904038729.mediawebs.co",nocase; classtype:attempted-recon; sid:200000146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"39.106.17.62",nocase; classtype:attempted-recon; sid:200000147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3a10a178.s6t6sj4s46tu4sys54y5.pages.dev",nocase; classtype:attempted-recon; sid:200000148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3ck.me",nocase; classtype:attempted-recon; sid:200000149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3d-securesd.ru",nocase; classtype:attempted-recon; sid:200000150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3ff7c459-86b2-4f6d-b6b0-ba6402ef6cb0.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3j124.csb.app",nocase; classtype:attempted-recon; sid:200000152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3mtb-verification.laag.com.mx",nocase; classtype:attempted-recon; sid:200000153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"40-81-203-10.cprapid.com",nocase; classtype:attempted-recon; sid:200000154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"40.122.173.212",nocase; classtype:attempted-recon; sid:200000155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4129.weebly.com",nocase; classtype:attempted-recon; sid:200000156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"42e2391f.sibforms.com",nocase; classtype:attempted-recon; sid:200000157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"43unpacking1pay.02164654.xyz",nocase; classtype:attempted-recon; sid:200000158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"45.55.167.181",nocase; classtype:attempted-recon; sid:200000159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"454145456551546.hyperphp.com",nocase; classtype:attempted-recon; sid:200000160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"47.106.140.45",nocase; classtype:attempted-recon; sid:200000161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4924049240.hoperadio1320am.com",nocase; classtype:attempted-recon; sid:200000162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4br.ir",nocase; classtype:attempted-recon; sid:200000163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4e81.com",nocase; classtype:attempted-recon; sid:200000164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4season.com.kh",nocase; classtype:attempted-recon; sid:200000165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4stepcoaching.com",nocase; classtype:attempted-recon; sid:200000166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4theloveofpizza.com",nocase; classtype:attempted-recon; sid:200000167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"4w8bmmjcw86e.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"50.116.95.242",nocase; classtype:attempted-recon; sid:200000169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"51.fi",nocase; classtype:attempted-recon; sid:200000170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"52.148.252.166",nocase; classtype:attempted-recon; sid:200000171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"52.20.22.249",nocase; classtype:attempted-recon; sid:200000172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5225.aftral.agacas.com",nocase; classtype:attempted-recon; sid:200000173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"53vzxcnk6rwp.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"546782d6.sibforms.com",nocase; classtype:attempted-recon; sid:200000175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"54hl91jm.xyz",nocase; classtype:attempted-recon; sid:200000176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5857fico-hsa6741.webcindario.com",nocase; classtype:attempted-recon; sid:200000177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5apps.vip",nocase; classtype:attempted-recon; sid:200000178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5b0f6cb9-0485-4fc7-9775-eb74bb45bbf6.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5e841ae2.srvr-cloudmail-srvr6765e7tg.pages.dev",nocase; classtype:attempted-recon; sid:200000180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5echinese-gamers.com",nocase; classtype:attempted-recon; sid:200000181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5ilucky.com",nocase; classtype:attempted-recon; sid:200000182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5zym7-5aaaa-aaaad-qb62a-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200000183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"61456456044241.hyperphp.com",nocase; classtype:attempted-recon; sid:200000184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"61da8ae6.6u6566hrrthsh45.pages.dev",nocase; classtype:attempted-recon; sid:200000185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"62a11d6242246f0c6b67e1eb--thriving-concha-bea56c.netlify.app",nocase; classtype:attempted-recon; sid:200000186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"636419.selcdn.ru",nocase; classtype:attempted-recon; sid:200000187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"638ca12d-ba2f-451c-8418-faf56b7de7ff.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"644591369889227362.mediawebs.co",nocase; classtype:attempted-recon; sid:200000189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6486scotiaenlineaserkinju.c1.biz",nocase; classtype:attempted-recon; sid:200000190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"651646144164.hyperphp.com",nocase; classtype:attempted-recon; sid:200000191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"65336fb4.sibforms.com",nocase; classtype:attempted-recon; sid:200000192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"65416451444544.hyperphp.com",nocase; classtype:attempted-recon; sid:200000193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"66466651454055.hyperphp.com",nocase; classtype:attempted-recon; sid:200000194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"69o0r.hyperphp.com",nocase; classtype:attempted-recon; sid:200000195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"6kshx.hyperphp.com",nocase; classtype:attempted-recon; sid:200000196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"700eteries.xyz",nocase; classtype:attempted-recon; sid:200000197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"70221289444326572923.co.vu",nocase; classtype:attempted-recon; sid:200000198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"70221289657292002.co.vu",nocase; classtype:attempted-recon; sid:200000199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7022128965729233.co.vu",nocase; classtype:attempted-recon; sid:200000200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"745b4e1ad89467221.temporary.link",nocase; classtype:attempted-recon; sid:200000201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"77-99001-54bmoonlinebanking-verifying.weebly.com",nocase; classtype:attempted-recon; sid:200000202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"77561.vip",nocase; classtype:attempted-recon; sid:200000203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"78.108.89.240",nocase; classtype:attempted-recon; sid:200000204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"784-auth.cf",nocase; classtype:attempted-recon; sid:200000205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7c576797.sibforms.com",nocase; classtype:attempted-recon; sid:200000206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7cf3fd69.sibforms.com",nocase; classtype:attempted-recon; sid:200000207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7dbe4fff.sibforms.com",nocase; classtype:attempted-recon; sid:200000208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7fusw1fl.xyz",nocase; classtype:attempted-recon; sid:200000209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7wr4u.csb.app",nocase; classtype:attempted-recon; sid:200000210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7x5dvh.csb.app",nocase; classtype:attempted-recon; sid:200000211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"7yu3v.csb.app",nocase; classtype:attempted-recon; sid:200000212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"80-108-82-166.cable.dynamic.surfer.at",nocase; classtype:attempted-recon; sid:200000213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"82.223.79.230",nocase; classtype:attempted-recon; sid:200000214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8236.luenthai.beingmurshad.com",nocase; classtype:attempted-recon; sid:200000215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"83.212.106.222",nocase; classtype:attempted-recon; sid:200000216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"858zmzpe.hyperphp.com",nocase; classtype:attempted-recon; sid:200000217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"86tui.pbgnfxaftmuypz.workers.dev",nocase; classtype:attempted-recon; sid:200000218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"873twc.csb.app",nocase; classtype:attempted-recon; sid:200000219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"87878aoll.weebly.com",nocase; classtype:attempted-recon; sid:200000220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"89888756.hostfree.pw",nocase; classtype:attempted-recon; sid:200000221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8auahx.assertiviadoc.cloud",nocase; classtype:attempted-recon; sid:200000222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"8vedxzstegklc0cqajyw.cooperage.com.au",nocase; classtype:attempted-recon; sid:200000223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9.jvemlbioja6989.workers.dev",nocase; classtype:attempted-recon; sid:200000224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"92.204.144.8",nocase; classtype:attempted-recon; sid:200000225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"943151c8c3ad.godaddysites.com",nocase; classtype:attempted-recon; sid:200000226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9d62cfee-59b3-42a8-9542-4b3a32692792.htmlcomponentservice.com",nocase; classtype:attempted-recon; sid:200000227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9ftytucsh4ph.clickfunnels.com",nocase; classtype:attempted-recon; sid:200000228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9janewshub.com.ng",nocase; classtype:attempted-recon; sid:200000229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"9pa278g346q7n89yr4d3s.co.vu",nocase; classtype:attempted-recon; sid:200000230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"@tresorkym.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a-ave.com",nocase; classtype:attempted-recon; sid:200000232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a-passinusr.tk",nocase; classtype:attempted-recon; sid:200000233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.60b7ac265566e3da4341f765b2d2a73200f8f1db57b0b005a1afdc00.com",nocase; classtype:attempted-recon; sid:200000234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.dab342ab8887461995aad393cb294948a5ce800ca279cd1027026d47.com",nocase; classtype:attempted-recon; sid:200000235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.insecurpage.recovery-safty.workers.dev",nocase; classtype:attempted-recon; sid:200000236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a.lfareriamurcia.repl.co",nocase; classtype:attempted-recon; sid:200000237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a000000000000.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a000000000000.web.app",nocase; classtype:attempted-recon; sid:200000239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0570626.xsph.ru",nocase; classtype:attempted-recon; sid:200000240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0689350.xsph.ru",nocase; classtype:attempted-recon; sid:200000241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0690714.xsph.ru",nocase; classtype:attempted-recon; sid:200000242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a0690825.xsph.ru",nocase; classtype:attempted-recon; sid:200000243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a4d3b42c.chgmar-d8y.pages.dev",nocase; classtype:attempted-recon; sid:200000244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a71843c1.mailssocloud-srvr65e5rd.pages.dev",nocase; classtype:attempted-recon; sid:200000245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a894ec7f.46t33454t4.pages.dev",nocase; classtype:attempted-recon; sid:200000246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aa9194b2-7510-4f93-aeff-c3e421ff21fe.id.repl.co",nocase; classtype:attempted-recon; sid:200000247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aaaa-9qg.pages.dev",nocase; classtype:attempted-recon; sid:200000248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aarr.pages.dev",nocase; classtype:attempted-recon; sid:200000249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aaseeosamso-asosemns.lcqujqj.asso.ci",nocase; classtype:attempted-recon; sid:200000250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abc.alkawthar.edu.sa",nocase; classtype:attempted-recon; sid:200000251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abf.org.in",nocase; classtype:attempted-recon; sid:200000252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"absolute.co.zw",nocase; classtype:attempted-recon; sid:200000253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"absolutepleasure.com.my",nocase; classtype:attempted-recon; sid:200000254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abzzt.gq",nocase; classtype:attempted-recon; sid:200000255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"academia-rennersolucoes-portl.blogspot.com",nocase; classtype:attempted-recon; sid:200000256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acalas.network",nocase; classtype:attempted-recon; sid:200000257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acalas.top",nocase; classtype:attempted-recon; sid:200000258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acceso-mex.com",nocase; classtype:attempted-recon; sid:200000259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accesrewards.web.app",nocase; classtype:attempted-recon; sid:200000260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"access-cancelled.com",nocase; classtype:attempted-recon; sid:200000261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accessreward.web.app",nocase; classtype:attempted-recon; sid:200000262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accnsmeosn.kdgumqb.asso.ci",nocase; classtype:attempted-recon; sid:200000263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accnsmeosn.mrfouma.asso.ci",nocase; classtype:attempted-recon; sid:200000264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account.verifications.help-page.workers.dev",nocase; classtype:attempted-recon; sid:200000265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account.yaanhnoo.xyz",nocase; classtype:attempted-recon; sid:200000266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account7894.godaddysites.com",nocase; classtype:attempted-recon; sid:200000267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"account987161xxxxhelpcenter.gq",nocase; classtype:attempted-recon; sid:200000268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accountesoui.gfffcdujhyopukr.com",nocase; classtype:attempted-recon; sid:200000269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accountsafetyrecovery.co.vu",nocase; classtype:attempted-recon; sid:200000270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accountsafetyrecoveryax.11126897531859233.web.id",nocase; classtype:attempted-recon; sid:200000271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accseeoen.fojshdx.asso.ci",nocase; classtype:attempted-recon; sid:200000272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acess-ofici-fatura.blogspot.com",nocase; classtype:attempted-recon; sid:200000273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acessando-facil-solucoes.com",nocase; classtype:attempted-recon; sid:200000274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acessando-facilmente-solucoes.com",nocase; classtype:attempted-recon; sid:200000275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acessodedodemo.blogspot.com",nocase; classtype:attempted-recon; sid:200000276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"achulemarecoa.firebaseapp.com",nocase; classtype:attempted-recon; sid:200000277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"achulemarecoa.web.app",nocase; classtype:attempted-recon; sid:200000278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aciermetal.com.br",nocase; classtype:attempted-recon; sid:200000279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acn.unpbls.sprt-acn.workers.dev",nocase; classtype:attempted-recon; sid:200000280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acnscure.cnfrm.scrthlp.workers.dev",nocase; classtype:attempted-recon; sid:200000281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.chenmanqi.top",nocase; classtype:attempted-recon; sid:200000282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.rwmcr.top",nocase; classtype:attempted-recon; sid:200000283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.uvlhwb.top",nocase; classtype:attempted-recon; sid:200000284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.wiguyc.top",nocase; classtype:attempted-recon; sid:200000285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.wkbakq.top",nocase; classtype:attempted-recon; sid:200000286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.wmysah.top",nocase; classtype:attempted-recon; sid:200000287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.wotygl.top",nocase; classtype:attempted-recon; sid:200000288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.wozavw.top",nocase; classtype:attempted-recon; sid:200000289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.xfertf.top",nocase; classtype:attempted-recon; sid:200000290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.xloclk.top",nocase; classtype:attempted-recon; sid:200000291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.xovtfx.top",nocase; classtype:attempted-recon; sid:200000292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.xubnkg.top",nocase; classtype:attempted-recon; sid:200000293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.xvljph.top",nocase; classtype:attempted-recon; sid:200000294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.xvotal.top",nocase; classtype:attempted-recon; sid:200000295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.xwitwq.top",nocase; classtype:attempted-recon; sid:200000296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.ybmkwa.top",nocase; classtype:attempted-recon; sid:200000297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.ydpssl.top",nocase; classtype:attempted-recon; sid:200000298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.yfnvfr.top",nocase; classtype:attempted-recon; sid:200000299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.yfsjiq.top",nocase; classtype:attempted-recon; sid:200000300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.yqggww.top",nocase; classtype:attempted-recon; sid:200000301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.ytbspo.top",nocase; classtype:attempted-recon; sid:200000302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.yvpnxy.top",nocase; classtype:attempted-recon; sid:200000303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.yyyuwr.top",nocase; classtype:attempted-recon; sid:200000304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.yyzded.top",nocase; classtype:attempted-recon; sid:200000305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.zohlkk.top",nocase; classtype:attempted-recon; sid:200000306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.zpirok.top",nocase; classtype:attempted-recon; sid:200000307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.zrzckw.top",nocase; classtype:attempted-recon; sid:200000308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.zusrue.top",nocase; classtype:attempted-recon; sid:200000309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acsr0.dvrlists.com",nocase; classtype:attempted-recon; sid:200000310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"act-premco.hostfree.pw",nocase; classtype:attempted-recon; sid:200000311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"act4dem.net",nocase; classtype:attempted-recon; sid:200000312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"actionformwork.com-iehjfbdjskjff-kjdsjfnjdnddjndff.zan-art.ro",nocase; classtype:attempted-recon; sid:200000313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activate-hulu-com-activate.sitey.me",nocase; classtype:attempted-recon; sid:200000314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activatesynmainnet.com",nocase; classtype:attempted-recon; sid:200000315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activeedr.boxmode.io",nocase; classtype:attempted-recon; sid:200000316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acxzsax.000webhostapp.com",nocase; classtype:attempted-recon; sid:200000317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adcloudserver.com",nocase; classtype:attempted-recon; sid:200000318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"addg.kywfdjq.cn",nocase; classtype:attempted-recon; sid:200000319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"additional-admin.wikaba.com",nocase; classtype:attempted-recon; sid:200000320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"additional-admin.zzux.com",nocase; classtype:attempted-recon; sid:200000321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ademi.iklient.net",nocase; classtype:attempted-recon; sid:200000322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adept-producer-5628.ck.page",nocase; classtype:attempted-recon; sid:200000323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adlobesharedattchment-messageservices.weebly.com",nocase; classtype:attempted-recon; sid:200000324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin-formserviceupdates.weeblysite.com",nocase; classtype:attempted-recon; sid:200000325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin-smbc1.dynamic-dns.net",nocase; classtype:attempted-recon; sid:200000326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin-smbc2.dynamic-dns.net",nocase; classtype:attempted-recon; sid:200000327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin-smbc3.dynamic-dns.net",nocase; classtype:attempted-recon; sid:200000328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin-smbc4.dynamic-dns.net",nocase; classtype:attempted-recon; sid:200000329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin-smbc5.dynamic-dns.net",nocase; classtype:attempted-recon; sid:200000330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin.epochfinancialus.com",nocase; classtype:attempted-recon; sid:200000331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admincasalogin.immobiliareit.immo",nocase; classtype:attempted-recon; sid:200000332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adobemicrosoftonline.myportfolio.com",nocase; classtype:attempted-recon; sid:200000333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adobeofficec5c2e764c17d59ed03ed35f514778e40c5c2e764c17d59ed03ed.officepost1.workers.dev",nocase; classtype:attempted-recon; sid:200000334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adpunemploymentclaims.sharefile.com",nocase; classtype:attempted-recon; sid:200000335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adroitjobs.com",nocase; classtype:attempted-recon; sid:200000336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ads.vbigfuy.cn",nocase; classtype:attempted-recon; sid:200000337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"advancefm.com.np",nocase; classtype:attempted-recon; sid:200000338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"adveninternational.com",nocase; classtype:attempted-recon; sid:200000339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeacsoooesmasnn.hacskzh.presse.ci",nocase; classtype:attempted-recon; sid:200000340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeaososmasnsnne.pvbezki.presse.ci",nocase; classtype:attempted-recon; sid:200000341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.02cky18n.com.cn",nocase; classtype:attempted-recon; sid:200000342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.10jqkq.com.cn",nocase; classtype:attempted-recon; sid:200000343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.1jiajia.com.cn",nocase; classtype:attempted-recon; sid:200000344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.1kaca8n.com.cn",nocase; classtype:attempted-recon; sid:200000345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.2009mp3.com.cn",nocase; classtype:attempted-recon; sid:200000346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.24pl5id2.com.cn",nocase; classtype:attempted-recon; sid:200000347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.258448.com.cn",nocase; classtype:attempted-recon; sid:200000348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.2rf7hec9.com.cn",nocase; classtype:attempted-recon; sid:200000349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.2taoke.com.cn",nocase; classtype:attempted-recon; sid:200000350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.3rdeye.com.cn",nocase; classtype:attempted-recon; sid:200000351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.41sj8oo5.com.cn",nocase; classtype:attempted-recon; sid:200000352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.467tuligo.com.cn",nocase; classtype:attempted-recon; sid:200000353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.4yhmeni1.com.cn",nocase; classtype:attempted-recon; sid:200000354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.51cpjm.com.cn",nocase; classtype:attempted-recon; sid:200000355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.62omc5cj.com.cn",nocase; classtype:attempted-recon; sid:200000356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.68cajhh2.com.cn",nocase; classtype:attempted-recon; sid:200000357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.6ei2p4y1.com.cn",nocase; classtype:attempted-recon; sid:200000358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.6gcwtdy2.com.cn",nocase; classtype:attempted-recon; sid:200000359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.771125.com.cn",nocase; classtype:attempted-recon; sid:200000360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.7arped5f.com.cn",nocase; classtype:attempted-recon; sid:200000361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.7nydmjms.com.cn",nocase; classtype:attempted-recon; sid:200000362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.7o2z4la.com.cn",nocase; classtype:attempted-recon; sid:200000363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.7r9wbdfl.com.cn",nocase; classtype:attempted-recon; sid:200000364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.94wbag4w.com.cn",nocase; classtype:attempted-recon; sid:200000365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.96a2lk5h.com.cn",nocase; classtype:attempted-recon; sid:200000366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.999365.com.cn",nocase; classtype:attempted-recon; sid:200000367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.air-com.com.cn",nocase; classtype:attempted-recon; sid:200000368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ajecm40.com.cn",nocase; classtype:attempted-recon; sid:200000369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.al41wzli.com.cn",nocase; classtype:attempted-recon; sid:200000370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.americar.com.cn",nocase; classtype:attempted-recon; sid:200000371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.anasousa.com.cn",nocase; classtype:attempted-recon; sid:200000372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.anggun.com.cn",nocase; classtype:attempted-recon; sid:200000373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.anmg74.com.cn",nocase; classtype:attempted-recon; sid:200000374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.anmg93.com.cn",nocase; classtype:attempted-recon; sid:200000375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.anmg95.com.cn",nocase; classtype:attempted-recon; sid:200000376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.astxgsl.com.cn",nocase; classtype:attempted-recon; sid:200000377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.banguang.com.cn",nocase; classtype:attempted-recon; sid:200000378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.bianbeng.com.cn",nocase; classtype:attempted-recon; sid:200000379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.biepie.com.cn",nocase; classtype:attempted-recon; sid:200000380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.bjdaohang.com.cn",nocase; classtype:attempted-recon; sid:200000381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.bjyyzs.com.cn",nocase; classtype:attempted-recon; sid:200000382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.caochui.com.cn",nocase; classtype:attempted-recon; sid:200000383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.cengce.com.cn",nocase; classtype:attempted-recon; sid:200000384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.cengcong.com.cn",nocase; classtype:attempted-recon; sid:200000385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.cengcou.com.cn",nocase; classtype:attempted-recon; sid:200000386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ch1twwgm.com.cn",nocase; classtype:attempted-recon; sid:200000387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.chaikuai.com.cn",nocase; classtype:attempted-recon; sid:200000388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.chanken.com.cn",nocase; classtype:attempted-recon; sid:200000389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.chaoah.com.cn",nocase; classtype:attempted-recon; sid:200000390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.chonlon.com.cn",nocase; classtype:attempted-recon; sid:200000391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.chuoyong.com.cn",nocase; classtype:attempted-recon; sid:200000392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.chuzai.com.cn",nocase; classtype:attempted-recon; sid:200000393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.city-114.com.cn",nocase; classtype:attempted-recon; sid:200000394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.commtown.com.cn",nocase; classtype:attempted-recon; sid:200000395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.cpvuenr.com.cn",nocase; classtype:attempted-recon; sid:200000396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.cxqingxi.com.cn",nocase; classtype:attempted-recon; sid:200000397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.da4f8sw7.com.cn",nocase; classtype:attempted-recon; sid:200000398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.danfudun.com.cn",nocase; classtype:attempted-recon; sid:200000399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.dangrang.com.cn",nocase; classtype:attempted-recon; sid:200000400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.dbcdpnq.com.cn",nocase; classtype:attempted-recon; sid:200000401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.dnmkwf1o.com.cn",nocase; classtype:attempted-recon; sid:200000402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.dyetieba.com.cn",nocase; classtype:attempted-recon; sid:200000403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.dzcfpx.com.cn",nocase; classtype:attempted-recon; sid:200000404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.eczifkk8.com.cn",nocase; classtype:attempted-recon; sid:200000405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.egwztyb.com.cn",nocase; classtype:attempted-recon; sid:200000406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ehbyz34.com.cn",nocase; classtype:attempted-recon; sid:200000407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ekwjci.com.cn",nocase; classtype:attempted-recon; sid:200000408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.exlrtf.com.cn",nocase; classtype:attempted-recon; sid:200000409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.fchzjdlo.com.cn",nocase; classtype:attempted-recon; sid:200000410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ffffound.com.cn",nocase; classtype:attempted-recon; sid:200000411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.findsky.com.cn",nocase; classtype:attempted-recon; sid:200000412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.firson.com.cn",nocase; classtype:attempted-recon; sid:200000413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.flyrov.com.cn",nocase; classtype:attempted-recon; sid:200000414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.foupian.com.cn",nocase; classtype:attempted-recon; sid:200000415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ftg2k9i0.com.cn",nocase; classtype:attempted-recon; sid:200000416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.g2ahwmfl.com.cn",nocase; classtype:attempted-recon; sid:200000417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ganghuan.com.cn",nocase; classtype:attempted-recon; sid:200000418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ge7r4k6k.com.cn",nocase; classtype:attempted-recon; sid:200000419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.gesbjzrc.com.cn",nocase; classtype:attempted-recon; sid:200000420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ghnclwyp.com.cn",nocase; classtype:attempted-recon; sid:200000421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.goucun.com.cn",nocase; classtype:attempted-recon; sid:200000422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.guabiao.com.cn",nocase; classtype:attempted-recon; sid:200000423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.gzhuilong.com.cn",nocase; classtype:attempted-recon; sid:200000424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.hbixwjd.com.cn",nocase; classtype:attempted-recon; sid:200000425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.hjpgggg.com.cn",nocase; classtype:attempted-recon; sid:200000426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.hotfax.com.cn",nocase; classtype:attempted-recon; sid:200000427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.hunluan.com.cn",nocase; classtype:attempted-recon; sid:200000428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ig9sez43.com.cn",nocase; classtype:attempted-recon; sid:200000429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.in-me.com.cn",nocase; classtype:attempted-recon; sid:200000430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.jianjule.com.cn",nocase; classtype:attempted-recon; sid:200000431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.jiayitu.com.cn",nocase; classtype:attempted-recon; sid:200000432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.jiongmen.com.cn",nocase; classtype:attempted-recon; sid:200000433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.jwdbxg.com.cn",nocase; classtype:attempted-recon; sid:200000434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.kado-icl.com.cn",nocase; classtype:attempted-recon; sid:200000435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.knwwzd8w.com.cn",nocase; classtype:attempted-recon; sid:200000436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.koreaego.com.cn",nocase; classtype:attempted-recon; sid:200000437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.kzntsjpw.com.cn",nocase; classtype:attempted-recon; sid:200000438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.laohuji8.com.cn",nocase; classtype:attempted-recon; sid:200000439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.lcjuyi.com.cn",nocase; classtype:attempted-recon; sid:200000440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.led-drive.com.cn",nocase; classtype:attempted-recon; sid:200000441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.lifelle.com.cn",nocase; classtype:attempted-recon; sid:200000442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.lintuo.com.cn",nocase; classtype:attempted-recon; sid:200000443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ljnnfx.com.cn",nocase; classtype:attempted-recon; sid:200000444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.longrang.com.cn",nocase; classtype:attempted-recon; sid:200000445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.louchun.com.cn",nocase; classtype:attempted-recon; sid:200000446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.luanzhi.com.cn",nocase; classtype:attempted-recon; sid:200000447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.lyrlzy.com.cn",nocase; classtype:attempted-recon; sid:200000448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.masang.com.cn",nocase; classtype:attempted-recon; sid:200000449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.memberly.com.cn",nocase; classtype:attempted-recon; sid:200000450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.mfdamjse.com.cn",nocase; classtype:attempted-recon; sid:200000451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.mobcrush.com.cn",nocase; classtype:attempted-recon; sid:200000452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.moshuai.com.cn",nocase; classtype:attempted-recon; sid:200000453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.mycarz.com.cn",nocase; classtype:attempted-recon; sid:200000454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.myglgw.com.cn",nocase; classtype:attempted-recon; sid:200000455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.n45piai5.com.cn",nocase; classtype:attempted-recon; sid:200000456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.n4a1ab3k.com.cn",nocase; classtype:attempted-recon; sid:200000457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.na1p4wo0.com.cn",nocase; classtype:attempted-recon; sid:200000458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.nangkong.com.cn",nocase; classtype:attempted-recon; sid:200000459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.nangrun.com.cn",nocase; classtype:attempted-recon; sid:200000460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.nbabjs.com.cn",nocase; classtype:attempted-recon; sid:200000461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ncvkfm.com.cn",nocase; classtype:attempted-recon; sid:200000462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.nenfou.com.cn",nocase; classtype:attempted-recon; sid:200000463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.nenghun.com.cn",nocase; classtype:attempted-recon; sid:200000464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.niaodiao.com.cn",nocase; classtype:attempted-recon; sid:200000465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.nmok1lw.com.cn",nocase; classtype:attempted-recon; sid:200000466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.nvpian.com.cn",nocase; classtype:attempted-recon; sid:200000467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.onetrip.com.cn",nocase; classtype:attempted-recon; sid:200000468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.onlysun.com.cn",nocase; classtype:attempted-recon; sid:200000469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ousikai.com.cn",nocase; classtype:attempted-recon; sid:200000470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.p104ac0c.com.cn",nocase; classtype:attempted-recon; sid:200000471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.pocketpc.com.cn",nocase; classtype:attempted-recon; sid:200000472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.pzcwk0j.com.cn",nocase; classtype:attempted-recon; sid:200000473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.qinghetea.com.cn",nocase; classtype:attempted-recon; sid:200000474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.rl04odcl.com.cn",nocase; classtype:attempted-recon; sid:200000475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.rstudio.com.cn",nocase; classtype:attempted-recon; sid:200000476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ruogan.com.cn",nocase; classtype:attempted-recon; sid:200000477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.shuailiao.com.cn",nocase; classtype:attempted-recon; sid:200000478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.skyhunter.com.cn",nocase; classtype:attempted-recon; sid:200000479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.sl-motor.com.cn",nocase; classtype:attempted-recon; sid:200000480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.snowtiger.com.cn",nocase; classtype:attempted-recon; sid:200000481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.sondaflex.com.cn",nocase; classtype:attempted-recon; sid:200000482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.soujiong.com.cn",nocase; classtype:attempted-recon; sid:200000483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.soutie.com.cn",nocase; classtype:attempted-recon; sid:200000484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.t1egk637.com.cn",nocase; classtype:attempted-recon; sid:200000485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.tayd5cw1.com.cn",nocase; classtype:attempted-recon; sid:200000486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.tcyn6mf.com.cn",nocase; classtype:attempted-recon; sid:200000487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.tglmer.com.cn",nocase; classtype:attempted-recon; sid:200000488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.tha9s0kc.com.cn",nocase; classtype:attempted-recon; sid:200000489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.tjzlhzj.com.cn",nocase; classtype:attempted-recon; sid:200000490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.tn51wpw7.com.cn",nocase; classtype:attempted-recon; sid:200000491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.trip4u.com.cn",nocase; classtype:attempted-recon; sid:200000492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.tugjqs.com.cn",nocase; classtype:attempted-recon; sid:200000493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.tuopiji.com.cn",nocase; classtype:attempted-recon; sid:200000494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.tushu010.com.cn",nocase; classtype:attempted-recon; sid:200000495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.uxgzqnx.com.cn",nocase; classtype:attempted-recon; sid:200000496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.uxmbaiy.com.cn",nocase; classtype:attempted-recon; sid:200000497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.v8muscle.com.cn",nocase; classtype:attempted-recon; sid:200000498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.vpzllll.com.cn",nocase; classtype:attempted-recon; sid:200000499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.waizong.com.cn",nocase; classtype:attempted-recon; sid:200000500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.weiseng.com.cn",nocase; classtype:attempted-recon; sid:200000501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.wmfoankc.com.cn",nocase; classtype:attempted-recon; sid:200000502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.woboshi.com.cn",nocase; classtype:attempted-recon; sid:200000503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.woodfire.com.cn",nocase; classtype:attempted-recon; sid:200000504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ws-f.com.cn",nocase; classtype:attempted-recon; sid:200000505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.wtp017fn.com.cn",nocase; classtype:attempted-recon; sid:200000506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.wuxiaozhu.com.cn",nocase; classtype:attempted-recon; sid:200000507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.xiesui.com.cn",nocase; classtype:attempted-recon; sid:200000508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.xyekod.com.cn",nocase; classtype:attempted-recon; sid:200000509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.yishuboli.com.cn",nocase; classtype:attempted-recon; sid:200000510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ylfapiao.com.cn",nocase; classtype:attempted-recon; sid:200000511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.ynak4890.com.cn",nocase; classtype:attempted-recon; sid:200000512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.zgqclbjw.com.cn",nocase; classtype:attempted-recon; sid:200000513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.zhaizhe.com.cn",nocase; classtype:attempted-recon; sid:200000514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.zhcw76.com.cn",nocase; classtype:attempted-recon; sid:200000515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.zhe5yr2g.com.cn",nocase; classtype:attempted-recon; sid:200000516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.zhengshao.com.cn",nocase; classtype:attempted-recon; sid:200000517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.zhusdz.com.cn",nocase; classtype:attempted-recon; sid:200000518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.zimifx.com.cn",nocase; classtype:attempted-recon; sid:200000519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.zonlc8yo.com.cn",nocase; classtype:attempted-recon; sid:200000520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.0571pf.com.cn",nocase; classtype:attempted-recon; sid:200000521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.0awwinj.com.cn",nocase; classtype:attempted-recon; sid:200000522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.10jqkq.com.cn",nocase; classtype:attempted-recon; sid:200000523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.12530a.com.cn",nocase; classtype:attempted-recon; sid:200000524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.1jiajia.com.cn",nocase; classtype:attempted-recon; sid:200000525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.1kaca8n.com.cn",nocase; classtype:attempted-recon; sid:200000526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.1pmc6awo.com.cn",nocase; classtype:attempted-recon; sid:200000527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.24pl5id2.com.cn",nocase; classtype:attempted-recon; sid:200000528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.258448.com.cn",nocase; classtype:attempted-recon; sid:200000529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.2rf7hec9.com.cn",nocase; classtype:attempted-recon; sid:200000530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.2rml4wyj.com.cn",nocase; classtype:attempted-recon; sid:200000531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.2taoke.com.cn",nocase; classtype:attempted-recon; sid:200000532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.467tuligo.com.cn",nocase; classtype:attempted-recon; sid:200000533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.4yhmeni1.com.cn",nocase; classtype:attempted-recon; sid:200000534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.5me8jao.com.cn",nocase; classtype:attempted-recon; sid:200000535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.7nydmjms.com.cn",nocase; classtype:attempted-recon; sid:200000536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.7o2z4la.com.cn",nocase; classtype:attempted-recon; sid:200000537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.96a2lk5h.com.cn",nocase; classtype:attempted-recon; sid:200000538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.99zixue.com.cn",nocase; classtype:attempted-recon; sid:200000539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.9as6kts.com.cn",nocase; classtype:attempted-recon; sid:200000540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.aibihua.com.cn",nocase; classtype:attempted-recon; sid:200000541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ajecm40.com.cn",nocase; classtype:attempted-recon; sid:200000542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.americar.com.cn",nocase; classtype:attempted-recon; sid:200000543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.anasousa.com.cn",nocase; classtype:attempted-recon; sid:200000544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.anmg04.com.cn",nocase; classtype:attempted-recon; sid:200000545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.anmg74.com.cn",nocase; classtype:attempted-recon; sid:200000546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.anmg93.com.cn",nocase; classtype:attempted-recon; sid:200000547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.astxgsl.com.cn",nocase; classtype:attempted-recon; sid:200000548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.banguang.com.cn",nocase; classtype:attempted-recon; sid:200000549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.beatle.com.cn",nocase; classtype:attempted-recon; sid:200000550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.biotope.com.cn",nocase; classtype:attempted-recon; sid:200000551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.bjdaohang.com.cn",nocase; classtype:attempted-recon; sid:200000552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.bjyyzs.com.cn",nocase; classtype:attempted-recon; sid:200000553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.c6a7km15.com.cn",nocase; classtype:attempted-recon; sid:200000554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.catbjsc.com.cn",nocase; classtype:attempted-recon; sid:200000555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.cengcong.com.cn",nocase; classtype:attempted-recon; sid:200000556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.chonlon.com.cn",nocase; classtype:attempted-recon; sid:200000557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.chuoyong.com.cn",nocase; classtype:attempted-recon; sid:200000558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.chuzai.com.cn",nocase; classtype:attempted-recon; sid:200000559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.city-114.com.cn",nocase; classtype:attempted-recon; sid:200000560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.commtown.com.cn",nocase; classtype:attempted-recon; sid:200000561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.coolyes.com.cn",nocase; classtype:attempted-recon; sid:200000562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.cscdma.com.cn",nocase; classtype:attempted-recon; sid:200000563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.cxqingxi.com.cn",nocase; classtype:attempted-recon; sid:200000564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.cz9s5fe.com.cn",nocase; classtype:attempted-recon; sid:200000565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.da4f8sw7.com.cn",nocase; classtype:attempted-recon; sid:200000566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.danfudun.com.cn",nocase; classtype:attempted-recon; sid:200000567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.dangrang.com.cn",nocase; classtype:attempted-recon; sid:200000568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.dapenti.com.cn",nocase; classtype:attempted-recon; sid:200000569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.dbcdpnq.com.cn",nocase; classtype:attempted-recon; sid:200000570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.diaozuan.com.cn",nocase; classtype:attempted-recon; sid:200000571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.dnmkwf1o.com.cn",nocase; classtype:attempted-recon; sid:200000572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.dz5e4pdb.com.cn",nocase; classtype:attempted-recon; sid:200000573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.e-ara.com.cn",nocase; classtype:attempted-recon; sid:200000574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.eczifkk8.com.cn",nocase; classtype:attempted-recon; sid:200000575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ehbyz34.com.cn",nocase; classtype:attempted-recon; sid:200000576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ekwjci.com.cn",nocase; classtype:attempted-recon; sid:200000577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.elourwb.com.cn",nocase; classtype:attempted-recon; sid:200000578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.exlrtf.com.cn",nocase; classtype:attempted-recon; sid:200000579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.fchzjdlo.com.cn",nocase; classtype:attempted-recon; sid:200000580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ffmfie.com.cn",nocase; classtype:attempted-recon; sid:200000581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.findsky.com.cn",nocase; classtype:attempted-recon; sid:200000582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.firson.com.cn",nocase; classtype:attempted-recon; sid:200000583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.flyrov.com.cn",nocase; classtype:attempted-recon; sid:200000584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ftg2k9i0.com.cn",nocase; classtype:attempted-recon; sid:200000585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.g08m4wm7.com.cn",nocase; classtype:attempted-recon; sid:200000586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.g2ahwmfl.com.cn",nocase; classtype:attempted-recon; sid:200000587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.gesbjzrc.com.cn",nocase; classtype:attempted-recon; sid:200000588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ghnclwyp.com.cn",nocase; classtype:attempted-recon; sid:200000589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.gjijjdo.com.cn",nocase; classtype:attempted-recon; sid:200000590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.guashui.com.cn",nocase; classtype:attempted-recon; sid:200000591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.gungou.com.cn",nocase; classtype:attempted-recon; sid:200000592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.guoxuwang.com.cn",nocase; classtype:attempted-recon; sid:200000593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.haivli.com.cn",nocase; classtype:attempted-recon; sid:200000594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.hanyimg.com.cn",nocase; classtype:attempted-recon; sid:200000595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.hbixwjd.com.cn",nocase; classtype:attempted-recon; sid:200000596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.hjpgggg.com.cn",nocase; classtype:attempted-recon; sid:200000597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.hncysq.com.cn",nocase; classtype:attempted-recon; sid:200000598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.hotfax.com.cn",nocase; classtype:attempted-recon; sid:200000599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.huanzhuan.com.cn",nocase; classtype:attempted-recon; sid:200000600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.hwblfwzy.com.cn",nocase; classtype:attempted-recon; sid:200000601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ielts100.com.cn",nocase; classtype:attempted-recon; sid:200000602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ifj2n1zk.com.cn",nocase; classtype:attempted-recon; sid:200000603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.in-me.com.cn",nocase; classtype:attempted-recon; sid:200000604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.jianjule.com.cn",nocase; classtype:attempted-recon; sid:200000605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.jiongmen.com.cn",nocase; classtype:attempted-recon; sid:200000606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.jiongzhui.com.cn",nocase; classtype:attempted-recon; sid:200000607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.jldele168.com.cn",nocase; classtype:attempted-recon; sid:200000608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.jpt5dfae.com.cn",nocase; classtype:attempted-recon; sid:200000609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.juancui.com.cn",nocase; classtype:attempted-recon; sid:200000610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.kado-icl.com.cn",nocase; classtype:attempted-recon; sid:200000611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.kinoptik.com.cn",nocase; classtype:attempted-recon; sid:200000612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.knwwzd8w.com.cn",nocase; classtype:attempted-recon; sid:200000613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.koreaego.com.cn",nocase; classtype:attempted-recon; sid:200000614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.kzntsjpw.com.cn",nocase; classtype:attempted-recon; sid:200000615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.land-sky.com.cn",nocase; classtype:attempted-recon; sid:200000616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.led-drive.com.cn",nocase; classtype:attempted-recon; sid:200000617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.leishuan.com.cn",nocase; classtype:attempted-recon; sid:200000618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.lingzuier.com.cn",nocase; classtype:attempted-recon; sid:200000619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.lintuo.com.cn",nocase; classtype:attempted-recon; sid:200000620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ljnnfx.com.cn",nocase; classtype:attempted-recon; sid:200000621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.longrang.com.cn",nocase; classtype:attempted-recon; sid:200000622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.lyjzsjy.com.cn",nocase; classtype:attempted-recon; sid:200000623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.lyrlzy.com.cn",nocase; classtype:attempted-recon; sid:200000624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.mcgwkyyk.com.cn",nocase; classtype:attempted-recon; sid:200000625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.memberly.com.cn",nocase; classtype:attempted-recon; sid:200000626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.mfdamjse.com.cn",nocase; classtype:attempted-recon; sid:200000627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.mintiao.com.cn",nocase; classtype:attempted-recon; sid:200000628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.moshuai.com.cn",nocase; classtype:attempted-recon; sid:200000629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.mouruo.com.cn",nocase; classtype:attempted-recon; sid:200000630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ms6p7zd1.com.cn",nocase; classtype:attempted-recon; sid:200000631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.mycarz.com.cn",nocase; classtype:attempted-recon; sid:200000632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.myglgw.com.cn",nocase; classtype:attempted-recon; sid:200000633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.mzbk4sk5.com.cn",nocase; classtype:attempted-recon; sid:200000634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.n45piai5.com.cn",nocase; classtype:attempted-recon; sid:200000635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.na1p4wo0.com.cn",nocase; classtype:attempted-recon; sid:200000636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.naishan.com.cn",nocase; classtype:attempted-recon; sid:200000637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.nangkong.com.cn",nocase; classtype:attempted-recon; sid:200000638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.nankingtr.com.cn",nocase; classtype:attempted-recon; sid:200000639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.nashuai.com.cn",nocase; classtype:attempted-recon; sid:200000640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.nasjwj.com.cn",nocase; classtype:attempted-recon; sid:200000641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.nbabjs.com.cn",nocase; classtype:attempted-recon; sid:200000642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ncvkfm.com.cn",nocase; classtype:attempted-recon; sid:200000643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.nenfou.com.cn",nocase; classtype:attempted-recon; sid:200000644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.nenghun.com.cn",nocase; classtype:attempted-recon; sid:200000645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.nenshao.com.cn",nocase; classtype:attempted-recon; sid:200000646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.newdate.com.cn",nocase; classtype:attempted-recon; sid:200000647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.niaoza.com.cn",nocase; classtype:attempted-recon; sid:200000648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.noikia.com.cn",nocase; classtype:attempted-recon; sid:200000649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.nongzong.com.cn",nocase; classtype:attempted-recon; sid:200000650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ntours.com.cn",nocase; classtype:attempted-recon; sid:200000651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.o2ospace.com.cn",nocase; classtype:attempted-recon; sid:200000652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.onetrip.com.cn",nocase; classtype:attempted-recon; sid:200000653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.os6i05e4.com.cn",nocase; classtype:attempted-recon; sid:200000654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.p104ac0c.com.cn",nocase; classtype:attempted-recon; sid:200000655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.pabw6yo.com.cn",nocase; classtype:attempted-recon; sid:200000656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.pangzhuo.com.cn",nocase; classtype:attempted-recon; sid:200000657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.pocketmac.com.cn",nocase; classtype:attempted-recon; sid:200000658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.pzai72m5.com.cn",nocase; classtype:attempted-recon; sid:200000659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.pzcwk0j.com.cn",nocase; classtype:attempted-recon; sid:200000660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.qiongran.com.cn",nocase; classtype:attempted-recon; sid:200000661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.rl04odcl.com.cn",nocase; classtype:attempted-recon; sid:200000662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.rstudio.com.cn",nocase; classtype:attempted-recon; sid:200000663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ruanlue.com.cn",nocase; classtype:attempted-recon; sid:200000664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ruogan.com.cn",nocase; classtype:attempted-recon; sid:200000665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.rxjh4f.com.cn",nocase; classtype:attempted-recon; sid:200000666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.s85zlc2.com.cn",nocase; classtype:attempted-recon; sid:200000667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.sechuang.com.cn",nocase; classtype:attempted-recon; sid:200000668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.shuailiao.com.cn",nocase; classtype:attempted-recon; sid:200000669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.shuanpeng.com.cn",nocase; classtype:attempted-recon; sid:200000670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.skyhunter.com.cn",nocase; classtype:attempted-recon; sid:200000671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.sl-motor.com.cn",nocase; classtype:attempted-recon; sid:200000672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.snowtiger.com.cn",nocase; classtype:attempted-recon; sid:200000673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.sondaflex.com.cn",nocase; classtype:attempted-recon; sid:200000674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.songnuan.com.cn",nocase; classtype:attempted-recon; sid:200000675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.soutie.com.cn",nocase; classtype:attempted-recon; sid:200000676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.t1egk637.com.cn",nocase; classtype:attempted-recon; sid:200000677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.t9jw5b0f.com.cn",nocase; classtype:attempted-recon; sid:200000678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.tcyn6mf.com.cn",nocase; classtype:attempted-recon; sid:200000679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.theraplex.com.cn",nocase; classtype:attempted-recon; sid:200000680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.topdpd.com.cn",nocase; classtype:attempted-recon; sid:200000681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.tugjqs.com.cn",nocase; classtype:attempted-recon; sid:200000682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.tuopiji.com.cn",nocase; classtype:attempted-recon; sid:200000683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.tushu010.com.cn",nocase; classtype:attempted-recon; sid:200000684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.wdtjwo86.com.cn",nocase; classtype:attempted-recon; sid:200000685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.weiseng.com.cn",nocase; classtype:attempted-recon; sid:200000686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.wengniao.com.cn",nocase; classtype:attempted-recon; sid:200000687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.wmfoankc.com.cn",nocase; classtype:attempted-recon; sid:200000688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.woboshi.com.cn",nocase; classtype:attempted-recon; sid:200000689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.wodfpl3.com.cn",nocase; classtype:attempted-recon; sid:200000690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.woodfire.com.cn",nocase; classtype:attempted-recon; sid:200000691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ws-f.com.cn",nocase; classtype:attempted-recon; sid:200000692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.x140le.com.cn",nocase; classtype:attempted-recon; sid:200000693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.xiongcou.com.cn",nocase; classtype:attempted-recon; sid:200000694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.xyekod.com.cn",nocase; classtype:attempted-recon; sid:200000695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.y9j1sctf.com.cn",nocase; classtype:attempted-recon; sid:200000696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.yhzjw7.com.cn",nocase; classtype:attempted-recon; sid:200000697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ylfapiao.com.cn",nocase; classtype:attempted-recon; sid:200000698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ym8i2wmc.com.cn",nocase; classtype:attempted-recon; sid:200000699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.yuezhun.com.cn",nocase; classtype:attempted-recon; sid:200000700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.zgqclbjw.com.cn",nocase; classtype:attempted-recon; sid:200000701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.zhe5yr2g.com.cn",nocase; classtype:attempted-recon; sid:200000702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.zhounen.com.cn",nocase; classtype:attempted-recon; sid:200000703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.zhuanniao.com.cn",nocase; classtype:attempted-recon; sid:200000704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.zhusdz.com.cn",nocase; classtype:attempted-recon; sid:200000705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.zonlc8yo.com.cn",nocase; classtype:attempted-recon; sid:200000706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.zoudang.com.cn",nocase; classtype:attempted-recon; sid:200000707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.zy5i7d9b.com.cn",nocase; classtype:attempted-recon; sid:200000708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeon-co-jp-d3fn4vrf7n46l3o4b9oen5.mowenotatyt.cf",nocase; classtype:attempted-recon; sid:200000709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeon-co-jp-d3fn4vrf7n46l3o4b9oen5.mowenveryy.tk",nocase; classtype:attempted-recon; sid:200000710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeon.co.jp.mdxtdqj.cn",nocase; classtype:attempted-recon; sid:200000711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeon.co.jp.mm6hfu.cn",nocase; classtype:attempted-recon; sid:200000712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeon.co.jp.mstvuuo.cn",nocase; classtype:attempted-recon; sid:200000713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.0571ol.com.cn",nocase; classtype:attempted-recon; sid:200000714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.07jmpe0s.com.cn",nocase; classtype:attempted-recon; sid:200000715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.18wyrcyp.com.cn",nocase; classtype:attempted-recon; sid:200000716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.1gpmre27.com.cn",nocase; classtype:attempted-recon; sid:200000717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.1mzrwj4k.com.cn",nocase; classtype:attempted-recon; sid:200000718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.52maodzw.com.cn",nocase; classtype:attempted-recon; sid:200000719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.5fj8w6dw.com.cn",nocase; classtype:attempted-recon; sid:200000720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.5igold.com.cn",nocase; classtype:attempted-recon; sid:200000721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.5jknac7k.com.cn",nocase; classtype:attempted-recon; sid:200000722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.668trip.com.cn",nocase; classtype:attempted-recon; sid:200000723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.6arjako6.com.cn",nocase; classtype:attempted-recon; sid:200000724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.82cm90eo.com.cn",nocase; classtype:attempted-recon; sid:200000725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.8gdwi7g8.com.cn",nocase; classtype:attempted-recon; sid:200000726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.9t80yk5l.com.cn",nocase; classtype:attempted-recon; sid:200000727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.aahrsk.com.cn",nocase; classtype:attempted-recon; sid:200000728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.abraxas.com.cn",nocase; classtype:attempted-recon; sid:200000729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.ainijun.com.cn",nocase; classtype:attempted-recon; sid:200000730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.almegc5p.com.cn",nocase; classtype:attempted-recon; sid:200000731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.amoe690p.com.cn",nocase; classtype:attempted-recon; sid:200000732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.anmg56.com.cn",nocase; classtype:attempted-recon; sid:200000733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.annrdzd.com.cn",nocase; classtype:attempted-recon; sid:200000734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.ansystem.com.cn",nocase; classtype:attempted-recon; sid:200000735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.apcezig.com.cn",nocase; classtype:attempted-recon; sid:200000736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.aqh27.com.cn",nocase; classtype:attempted-recon; sid:200000737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.artlong.com.cn",nocase; classtype:attempted-recon; sid:200000738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.banglia.com.cn",nocase; classtype:attempted-recon; sid:200000739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.bbbjdq.com.cn",nocase; classtype:attempted-recon; sid:200000740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.bengkai.com.cn",nocase; classtype:attempted-recon; sid:200000741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.bjbyby.com.cn",nocase; classtype:attempted-recon; sid:200000742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.byukumg.com.cn",nocase; classtype:attempted-recon; sid:200000743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.bztfylsb.com.cn",nocase; classtype:attempted-recon; sid:200000744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.c8mnem0w.com.cn",nocase; classtype:attempted-recon; sid:200000745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.cangceng.com.cn",nocase; classtype:attempted-recon; sid:200000746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.ccrvpd.com.cn",nocase; classtype:attempted-recon; sid:200000747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.cengpiao.com.cn",nocase; classtype:attempted-recon; sid:200000748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.cenhuan.com.cn",nocase; classtype:attempted-recon; sid:200000749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.centong.com.cn",nocase; classtype:attempted-recon; sid:200000750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.chakua.com.cn",nocase; classtype:attempted-recon; sid:200000751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.chuandou.com.cn",nocase; classtype:attempted-recon; sid:200000752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.chunou.com.cn",nocase; classtype:attempted-recon; sid:200000753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.d7rspbam.com.cn",nocase; classtype:attempted-recon; sid:200000754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.dcyj365.com.cn",nocase; classtype:attempted-recon; sid:200000755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.djblcbay.com.cn",nocase; classtype:attempted-recon; sid:200000756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.double-e.com.cn",nocase; classtype:attempted-recon; sid:200000757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.duixuan.com.cn",nocase; classtype:attempted-recon; sid:200000758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.duiyao.com.cn",nocase; classtype:attempted-recon; sid:200000759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.dunping.com.cn",nocase; classtype:attempted-recon; sid:200000760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.dylwkj.com.cn",nocase; classtype:attempted-recon; sid:200000761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.eb7v1l.com.cn",nocase; classtype:attempted-recon; sid:200000762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.enmedj.com.cn",nocase; classtype:attempted-recon; sid:200000763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.epw7b8gn.com.cn",nocase; classtype:attempted-recon; sid:200000764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.fad7hdw.com.cn",nocase; classtype:attempted-recon; sid:200000765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.fangpen.com.cn",nocase; classtype:attempted-recon; sid:200000766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.flintcg.com.cn",nocase; classtype:attempted-recon; sid:200000767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.fouguo.com.cn",nocase; classtype:attempted-recon; sid:200000768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.fouteng.com.cn",nocase; classtype:attempted-recon; sid:200000769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.fsibiu.com.cn",nocase; classtype:attempted-recon; sid:200000770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.g064wyb3.com.cn",nocase; classtype:attempted-recon; sid:200000771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.gccc-web.com.cn",nocase; classtype:attempted-recon; sid:200000772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.greenseal.com.cn",nocase; classtype:attempted-recon; sid:200000773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.guisao.com.cn",nocase; classtype:attempted-recon; sid:200000774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.hbccmy.com.cn",nocase; classtype:attempted-recon; sid:200000775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.hencang.com.cn",nocase; classtype:attempted-recon; sid:200000776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.hensuo.com.cn",nocase; classtype:attempted-recon; sid:200000777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.her-story.com.cn",nocase; classtype:attempted-recon; sid:200000778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.huaiduan.com.cn",nocase; classtype:attempted-recon; sid:200000779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.huangcui.com.cn",nocase; classtype:attempted-recon; sid:200000780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.hubpen.com.cn",nocase; classtype:attempted-recon; sid:200000781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.hznami.com.cn",nocase; classtype:attempted-recon; sid:200000782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.i-law.com.cn",nocase; classtype:attempted-recon; sid:200000783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.iak8co0w.com.cn",nocase; classtype:attempted-recon; sid:200000784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.ifysdvf.com.cn",nocase; classtype:attempted-recon; sid:200000785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.jdvmaa.com.cn",nocase; classtype:attempted-recon; sid:200000786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.jianlue.com.cn",nocase; classtype:attempted-recon; sid:200000787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.jinuoer.com.cn",nocase; classtype:attempted-recon; sid:200000788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.jipenggf.com.cn",nocase; classtype:attempted-recon; sid:200000789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.jirk0sh.com.cn",nocase; classtype:attempted-recon; sid:200000790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.jmwrlfp7.com.cn",nocase; classtype:attempted-recon; sid:200000791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.jngwkhs.com.cn",nocase; classtype:attempted-recon; sid:200000792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.jnqgjx.com.cn",nocase; classtype:attempted-recon; sid:200000793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.juncui.com.cn",nocase; classtype:attempted-recon; sid:200000794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.juyuangs.com.cn",nocase; classtype:attempted-recon; sid:200000795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.kangzu.com.cn",nocase; classtype:attempted-recon; sid:200000796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.kepie.com.cn",nocase; classtype:attempted-recon; sid:200000797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.kesang.com.cn",nocase; classtype:attempted-recon; sid:200000798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.km-senge.com.cn",nocase; classtype:attempted-recon; sid:200000799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.krfocm97.com.cn",nocase; classtype:attempted-recon; sid:200000800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.kuiwai.com.cn",nocase; classtype:attempted-recon; sid:200000801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.l091ezsp.com.cn",nocase; classtype:attempted-recon; sid:200000802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.langpang.com.cn",nocase; classtype:attempted-recon; sid:200000803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.lieding.com.cn",nocase; classtype:attempted-recon; sid:200000804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.lijun99.com.cn",nocase; classtype:attempted-recon; sid:200000805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.litoyes.com.cn",nocase; classtype:attempted-recon; sid:200000806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.liujue.com.cn",nocase; classtype:attempted-recon; sid:200000807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.longlia.com.cn",nocase; classtype:attempted-recon; sid:200000808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.ludrus.com.cn",nocase; classtype:attempted-recon; sid:200000809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.lunluan.com.cn",nocase; classtype:attempted-recon; sid:200000810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.mb9tolcw.com.cn",nocase; classtype:attempted-recon; sid:200000811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.mengstar.com.cn",nocase; classtype:attempted-recon; sid:200000812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.mgm741.com.cn",nocase; classtype:attempted-recon; sid:200000813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.midea-sz.com.cn",nocase; classtype:attempted-recon; sid:200000814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.miningcn.com.cn",nocase; classtype:attempted-recon; sid:200000815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.missjto.com.cn",nocase; classtype:attempted-recon; sid:200000816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.miuhua.com.cn",nocase; classtype:attempted-recon; sid:200000817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.miukai.com.cn",nocase; classtype:attempted-recon; sid:200000818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.moomail.com.cn",nocase; classtype:attempted-recon; sid:200000819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.mouxsgi.com.cn",nocase; classtype:attempted-recon; sid:200000820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.music98.com.cn",nocase; classtype:attempted-recon; sid:200000821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.neatec.com.cn",nocase; classtype:attempted-recon; sid:200000822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.nengzhuo.com.cn",nocase; classtype:attempted-recon; sid:200000823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.nentian.com.cn",nocase; classtype:attempted-recon; sid:200000824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.nenxuan.com.cn",nocase; classtype:attempted-recon; sid:200000825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.newbaron.com.cn",nocase; classtype:attempted-recon; sid:200000826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.niaoken.com.cn",nocase; classtype:attempted-recon; sid:200000827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.niushuan.com.cn",nocase; classtype:attempted-recon; sid:200000828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.nsmile.com.cn",nocase; classtype:attempted-recon; sid:200000829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.officetv.com.cn",nocase; classtype:attempted-recon; sid:200000830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.p5gyazta.com.cn",nocase; classtype:attempted-recon; sid:200000831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.p8b9ge4a.com.cn",nocase; classtype:attempted-recon; sid:200000832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.qddongye.com.cn",nocase; classtype:attempted-recon; sid:200000833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.qiachang.com.cn",nocase; classtype:attempted-recon; sid:200000834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.qiongkui.com.cn",nocase; classtype:attempted-recon; sid:200000835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.rmtrxq.com.cn",nocase; classtype:attempted-recon; sid:200000836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.rochemall.com.cn",nocase; classtype:attempted-recon; sid:200000837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.ruzhun.com.cn",nocase; classtype:attempted-recon; sid:200000838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.s7aecrtl.com.cn",nocase; classtype:attempted-recon; sid:200000839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.sgmbtwri.com.cn",nocase; classtype:attempted-recon; sid:200000840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.shenzen.com.cn",nocase; classtype:attempted-recon; sid:200000841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.shhdbjgs.com.cn",nocase; classtype:attempted-recon; sid:200000842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.shsiwei.com.cn",nocase; classtype:attempted-recon; sid:200000843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.smgjl20g.com.cn",nocase; classtype:attempted-recon; sid:200000844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.sof8d4a5.com.cn",nocase; classtype:attempted-recon; sid:200000845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.suny365.com.cn",nocase; classtype:attempted-recon; sid:200000846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.syslynk.com.cn",nocase; classtype:attempted-recon; sid:200000847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.t8r0emhb.com.cn",nocase; classtype:attempted-recon; sid:200000848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.taotaomu.com.cn",nocase; classtype:attempted-recon; sid:200000849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.tj-wy.com.cn",nocase; classtype:attempted-recon; sid:200000850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.toulun.com.cn",nocase; classtype:attempted-recon; sid:200000851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.toyokuni.com.cn",nocase; classtype:attempted-recon; sid:200000852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.tvjpam.com.cn",nocase; classtype:attempted-recon; sid:200000853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.twlcsa95.com.cn",nocase; classtype:attempted-recon; sid:200000854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.vtugoel.com.cn",nocase; classtype:attempted-recon; sid:200000855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.whhyyy.com.cn",nocase; classtype:attempted-recon; sid:200000856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.wjdieib.com.cn",nocase; classtype:attempted-recon; sid:200000857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.wuaqrd.com.cn",nocase; classtype:attempted-recon; sid:200000858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.wxznjj.com.cn",nocase; classtype:attempted-recon; sid:200000859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.x-heater.com.cn",nocase; classtype:attempted-recon; sid:200000860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.xbfjnrvy.com.cn",nocase; classtype:attempted-recon; sid:200000861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.xkdibq.com.cn",nocase; classtype:attempted-recon; sid:200000862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.xtensyon.com.cn",nocase; classtype:attempted-recon; sid:200000863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.xuanwai.com.cn",nocase; classtype:attempted-recon; sid:200000864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.yaoshuang.com.cn",nocase; classtype:attempted-recon; sid:200000865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.yujuwang.com.cn",nocase; classtype:attempted-recon; sid:200000866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.yuken-sh.com.cn",nocase; classtype:attempted-recon; sid:200000867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.ywi1nm3w.com.cn",nocase; classtype:attempted-recon; sid:200000868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.z0oc4jm8.com.cn",nocase; classtype:attempted-recon; sid:200000869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.zaixiong.com.cn",nocase; classtype:attempted-recon; sid:200000870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.zclkwj.com.cn",nocase; classtype:attempted-recon; sid:200000871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.zhangtun.com.cn",nocase; classtype:attempted-recon; sid:200000872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.zhaopang.com.cn",nocase; classtype:attempted-recon; sid:200000873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.zhoutun.com.cn",nocase; classtype:attempted-recon; sid:200000874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.zuohuai.com.cn",nocase; classtype:attempted-recon; sid:200000875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeouumsd.qdgct2.top",nocase; classtype:attempted-recon; sid:200000876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aerospacesses.com",nocase; classtype:attempted-recon; sid:200000877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.173mir.com.cn",nocase; classtype:attempted-recon; sid:200000878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.18wyrcyp.com.cn",nocase; classtype:attempted-recon; sid:200000879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.1gpmre27.com.cn",nocase; classtype:attempted-recon; sid:200000880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.48irel3a.com.cn",nocase; classtype:attempted-recon; sid:200000881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.5d7n8ca.com.cn",nocase; classtype:attempted-recon; sid:200000882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.5fj8w6dw.com.cn",nocase; classtype:attempted-recon; sid:200000883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.5jknac7k.com.cn",nocase; classtype:attempted-recon; sid:200000884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.5p6me2m6.com.cn",nocase; classtype:attempted-recon; sid:200000885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.668trip.com.cn",nocase; classtype:attempted-recon; sid:200000886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.6arjako6.com.cn",nocase; classtype:attempted-recon; sid:200000887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.8gdwi7g8.com.cn",nocase; classtype:attempted-recon; sid:200000888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.9hks0gzd.com.cn",nocase; classtype:attempted-recon; sid:200000889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.ahkusa.com.cn",nocase; classtype:attempted-recon; sid:200000890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.ai8cswyc.com.cn",nocase; classtype:attempted-recon; sid:200000891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.ainijun.com.cn",nocase; classtype:attempted-recon; sid:200000892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.amoe690p.com.cn",nocase; classtype:attempted-recon; sid:200000893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.anmg56.com.cn",nocase; classtype:attempted-recon; sid:200000894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.annrdzd.com.cn",nocase; classtype:attempted-recon; sid:200000895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.anzypb.com.cn",nocase; classtype:attempted-recon; sid:200000896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.bengchen.com.cn",nocase; classtype:attempted-recon; sid:200000897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.bengkai.com.cn",nocase; classtype:attempted-recon; sid:200000898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.byukumg.com.cn",nocase; classtype:attempted-recon; sid:200000899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.c5w9lsk7.com.cn",nocase; classtype:attempted-recon; sid:200000900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.ccrvpd.com.cn",nocase; classtype:attempted-recon; sid:200000901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.cengkuo.com.cn",nocase; classtype:attempted-recon; sid:200000902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.cengzhe.com.cn",nocase; classtype:attempted-recon; sid:200000903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.cengzheng.com.cn",nocase; classtype:attempted-recon; sid:200000904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.centong.com.cn",nocase; classtype:attempted-recon; sid:200000905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.chakua.com.cn",nocase; classtype:attempted-recon; sid:200000906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.chunou.com.cn",nocase; classtype:attempted-recon; sid:200000907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.cocopos.com.cn",nocase; classtype:attempted-recon; sid:200000908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.d7rspbam.com.cn",nocase; classtype:attempted-recon; sid:200000909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.djblcbay.com.cn",nocase; classtype:attempted-recon; sid:200000910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.dmapjlnk.com.cn",nocase; classtype:attempted-recon; sid:200000911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.double-e.com.cn",nocase; classtype:attempted-recon; sid:200000912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.duozhua.com.cn",nocase; classtype:attempted-recon; sid:200000913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.dylwkj.com.cn",nocase; classtype:attempted-recon; sid:200000914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.ectmj7b.com.cn",nocase; classtype:attempted-recon; sid:200000915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.elj0kcaw.com.cn",nocase; classtype:attempted-recon; sid:200000916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.enmedj.com.cn",nocase; classtype:attempted-recon; sid:200000917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.epw7b8gn.com.cn",nocase; classtype:attempted-recon; sid:200000918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.ewmamomf.com.cn",nocase; classtype:attempted-recon; sid:200000919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.ez0ydrzw.com.cn",nocase; classtype:attempted-recon; sid:200000920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.fangpen.com.cn",nocase; classtype:attempted-recon; sid:200000921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.flintcg.com.cn",nocase; classtype:attempted-recon; sid:200000922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.foucang.com.cn",nocase; classtype:attempted-recon; sid:200000923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.fsibiu.com.cn",nocase; classtype:attempted-recon; sid:200000924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.fwjl0cr.com.cn",nocase; classtype:attempted-recon; sid:200000925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.g064wyb3.com.cn",nocase; classtype:attempted-recon; sid:200000926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.gainiao.com.cn",nocase; classtype:attempted-recon; sid:200000927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.gaofugolf.com.cn",nocase; classtype:attempted-recon; sid:200000928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.gccc-web.com.cn",nocase; classtype:attempted-recon; sid:200000929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.guizai.com.cn",nocase; classtype:attempted-recon; sid:200000930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.guxinwang.com.cn",nocase; classtype:attempted-recon; sid:200000931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.hbccmy.com.cn",nocase; classtype:attempted-recon; sid:200000932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.hencang.com.cn",nocase; classtype:attempted-recon; sid:200000933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.huanan-wm.com.cn",nocase; classtype:attempted-recon; sid:200000934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.i-law.com.cn",nocase; classtype:attempted-recon; sid:200000935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.iak8co0w.com.cn",nocase; classtype:attempted-recon; sid:200000936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.ifysdvf.com.cn",nocase; classtype:attempted-recon; sid:200000937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.jdvmaa.com.cn",nocase; classtype:attempted-recon; sid:200000938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.jiangzhua.com.cn",nocase; classtype:attempted-recon; sid:200000939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.jianlue.com.cn",nocase; classtype:attempted-recon; sid:200000940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.jielue.com.cn",nocase; classtype:attempted-recon; sid:200000941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.jionglv.com.cn",nocase; classtype:attempted-recon; sid:200000942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.jiuchui.com.cn",nocase; classtype:attempted-recon; sid:200000943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.jngwkhs.com.cn",nocase; classtype:attempted-recon; sid:200000944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.jnqgjx.com.cn",nocase; classtype:attempted-recon; sid:200000945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.juncui.com.cn",nocase; classtype:attempted-recon; sid:200000946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.juyuangs.com.cn",nocase; classtype:attempted-recon; sid:200000947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.kararar.com.cn",nocase; classtype:attempted-recon; sid:200000948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.kayumanis.com.cn",nocase; classtype:attempted-recon; sid:200000949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.kepie.com.cn",nocase; classtype:attempted-recon; sid:200000950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.kesang.com.cn",nocase; classtype:attempted-recon; sid:200000951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.kfs119.com.cn",nocase; classtype:attempted-recon; sid:200000952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.konggan.com.cn",nocase; classtype:attempted-recon; sid:200000953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.koyosha.com.cn",nocase; classtype:attempted-recon; sid:200000954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.langpang.com.cn",nocase; classtype:attempted-recon; sid:200000955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.lhanivo.com.cn",nocase; classtype:attempted-recon; sid:200000956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.lieding.com.cn",nocase; classtype:attempted-recon; sid:200000957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.lijun99.com.cn",nocase; classtype:attempted-recon; sid:200000958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.longlia.com.cn",nocase; classtype:attempted-recon; sid:200000959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.longnai.com.cn",nocase; classtype:attempted-recon; sid:200000960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.ludrus.com.cn",nocase; classtype:attempted-recon; sid:200000961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.lunluan.com.cn",nocase; classtype:attempted-recon; sid:200000962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.maozhui.com.cn",nocase; classtype:attempted-recon; sid:200000963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.mb9tolcw.com.cn",nocase; classtype:attempted-recon; sid:200000964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.mengstar.com.cn",nocase; classtype:attempted-recon; sid:200000965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.mgm741.com.cn",nocase; classtype:attempted-recon; sid:200000966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.missjto.com.cn",nocase; classtype:attempted-recon; sid:200000967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.miuhua.com.cn",nocase; classtype:attempted-recon; sid:200000968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.miukai.com.cn",nocase; classtype:attempted-recon; sid:200000969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.mouxsgi.com.cn",nocase; classtype:attempted-recon; sid:200000970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.music98.com.cn",nocase; classtype:attempted-recon; sid:200000971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.nakm6sc2.com.cn",nocase; classtype:attempted-recon; sid:200000972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.neatec.com.cn",nocase; classtype:attempted-recon; sid:200000973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.nentian.com.cn",nocase; classtype:attempted-recon; sid:200000974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.nenxuan.com.cn",nocase; classtype:attempted-recon; sid:200000975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.niaohong.com.cn",nocase; classtype:attempted-recon; sid:200000976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.niaoken.com.cn",nocase; classtype:attempted-recon; sid:200000977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.nsmile.com.cn",nocase; classtype:attempted-recon; sid:200000978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.officetv.com.cn",nocase; classtype:attempted-recon; sid:200000979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.offlady.com.cn",nocase; classtype:attempted-recon; sid:200000980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.p5gyazta.com.cn",nocase; classtype:attempted-recon; sid:200000981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.phdisy21.com.cn",nocase; classtype:attempted-recon; sid:200000982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.pianxia.com.cn",nocase; classtype:attempted-recon; sid:200000983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.power-x.com.cn",nocase; classtype:attempted-recon; sid:200000984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.pujinb5.com.cn",nocase; classtype:attempted-recon; sid:200000985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.qddongye.com.cn",nocase; classtype:attempted-recon; sid:200000986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.qiachang.com.cn",nocase; classtype:attempted-recon; sid:200000987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.qiongkui.com.cn",nocase; classtype:attempted-recon; sid:200000988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.rmtrxq.com.cn",nocase; classtype:attempted-recon; sid:200000989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.rochemall.com.cn",nocase; classtype:attempted-recon; sid:200000990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.ruodiangc.com.cn",nocase; classtype:attempted-recon; sid:200000991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.shenzen.com.cn",nocase; classtype:attempted-recon; sid:200000992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.sof8d4a5.com.cn",nocase; classtype:attempted-recon; sid:200000993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.syslynk.com.cn",nocase; classtype:attempted-recon; sid:200000994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.taotaomu.com.cn",nocase; classtype:attempted-recon; sid:200000995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.tb6nesmd.com.cn",nocase; classtype:attempted-recon; sid:200000996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.tj-wy.com.cn",nocase; classtype:attempted-recon; sid:200000997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.tnvtgb.com.cn",nocase; classtype:attempted-recon; sid:200000998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.tuanga.com.cn",nocase; classtype:attempted-recon; sid:200000999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.tvjpam.com.cn",nocase; classtype:attempted-recon; sid:200001000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.twlcsa95.com.cn",nocase; classtype:attempted-recon; sid:200001001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.viptoy.com.cn",nocase; classtype:attempted-recon; sid:200001002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.wang114.com.cn",nocase; classtype:attempted-recon; sid:200001003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.webside.com.cn",nocase; classtype:attempted-recon; sid:200001004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.whhyyy.com.cn",nocase; classtype:attempted-recon; sid:200001005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.wrjhcge.com.cn",nocase; classtype:attempted-recon; sid:200001006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.wuaqrd.com.cn",nocase; classtype:attempted-recon; sid:200001007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.xkdibq.com.cn",nocase; classtype:attempted-recon; sid:200001008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.xuanwai.com.cn",nocase; classtype:attempted-recon; sid:200001009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.xvpkcx.com.cn",nocase; classtype:attempted-recon; sid:200001010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.yaoshuang.com.cn",nocase; classtype:attempted-recon; sid:200001011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.yuken-sh.com.cn",nocase; classtype:attempted-recon; sid:200001012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.ywi1nm3w.com.cn",nocase; classtype:attempted-recon; sid:200001013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.zaixiong.com.cn",nocase; classtype:attempted-recon; sid:200001014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.zhaizhang.com.cn",nocase; classtype:attempted-recon; sid:200001015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.zhaopang.com.cn",nocase; classtype:attempted-recon; sid:200001016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeue.card.avym0i.xyz",nocase; classtype:attempted-recon; sid:200001017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afeadfgc.odoo.com",nocase; classtype:attempted-recon; sid:200001018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"affix-beta.ru",nocase; classtype:attempted-recon; sid:200001019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"affixwallet.net",nocase; classtype:attempted-recon; sid:200001020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afp--futuro.com",nocase; classtype:attempted-recon; sid:200001021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afpbanreservasbm.webcindario.com",nocase; classtype:attempted-recon; sid:200001022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afromanic.com",nocase; classtype:attempted-recon; sid:200001023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"afurniturefind.com",nocase; classtype:attempted-recon; sid:200001024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aged-breeze-3230.on.fleek.co",nocase; classtype:attempted-recon; sid:200001025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agence-wordpress-bordeaux.com",nocase; classtype:attempted-recon; sid:200001026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhifly75390.top",nocase; classtype:attempted-recon; sid:200001027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk40710.xyz",nocase; classtype:attempted-recon; sid:200001028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk41287.xyz",nocase; classtype:attempted-recon; sid:200001029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk58029.xyz",nocase; classtype:attempted-recon; sid:200001030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk69753.xyz",nocase; classtype:attempted-recon; sid:200001031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk69875.xyz",nocase; classtype:attempted-recon; sid:200001032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk69965.xyz",nocase; classtype:attempted-recon; sid:200001033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bhiflyk84276.xyz",nocase; classtype:attempted-recon; sid:200001034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.bsxctmkgw.top",nocase; classtype:attempted-recon; sid:200001035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.cbxdwjl.top",nocase; classtype:attempted-recon; sid:200001036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.cwgtmkgw.top",nocase; classtype:attempted-recon; sid:200001037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.dbagpromkgw.top",nocase; classtype:attempted-recon; sid:200001038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.dcgobmyh.top",nocase; classtype:attempted-recon; sid:200001039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.deutschemkgw.top",nocase; classtype:attempted-recon; sid:200001040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.dwpq985.xyz",nocase; classtype:attempted-recon; sid:200001041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.eurexmkdw.top",nocase; classtype:attempted-recon; sid:200001042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.hrxymkdw.top",nocase; classtype:attempted-recon; sid:200001043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.itbitwde.top",nocase; classtype:attempted-recon; sid:200001044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agent.kpdgmk.top",nocase; classtype:attempted-recon; sid:200001045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aggarwalfincorps.com",nocase; classtype:attempted-recon; sid:200001046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agglornamento-26-n-dati-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200001047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agri-cole-fr-t-i.web.app",nocase; classtype:attempted-recon; sid:200001048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"agrimetiersmartinique.fr",nocase; classtype:attempted-recon; sid:200001049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aguavista.com.py",nocase; classtype:attempted-recon; sid:200001050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aheaddrive.pages.dev",nocase; classtype:attempted-recon; sid:200001051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ahhhh.pe.kr",nocase; classtype:attempted-recon; sid:200001052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aibonlinehelpservices.com",nocase; classtype:attempted-recon; sid:200001053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aizik-whatsapp-firebase-clone.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ajudacef.com",nocase; classtype:attempted-recon; sid:200001055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"akanksha3012.github.io",nocase; classtype:attempted-recon; sid:200001056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"akerudreamproject.org",nocase; classtype:attempted-recon; sid:200001057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"akiakir.com",nocase; classtype:attempted-recon; sid:200001058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"akperkridahusada.siakad.net",nocase; classtype:attempted-recon; sid:200001059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aks34.github.io",nocase; classtype:attempted-recon; sid:200001060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aktualizacja.jst.pl",nocase; classtype:attempted-recon; sid:200001061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alacrit.web.app",nocase; classtype:attempted-recon; sid:200001062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alareentading-catalog.page.tl",nocase; classtype:attempted-recon; sid:200001063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alarmesfaturamento.com",nocase; classtype:attempted-recon; sid:200001064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alaskausa8payment.my-vigor.de",nocase; classtype:attempted-recon; sid:200001065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alayohomes.com",nocase; classtype:attempted-recon; sid:200001066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"albaraka-bank.net",nocase; classtype:attempted-recon; sid:200001067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"albel.intnet.mu",nocase; classtype:attempted-recon; sid:200001068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"albertoliviera014.outgrow.us",nocase; classtype:attempted-recon; sid:200001069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aldana.in",nocase; classtype:attempted-recon; sid:200001070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alerta-sms-novobanco.com",nocase; classtype:attempted-recon; sid:200001071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alerts.department.improvement.workers.dev",nocase; classtype:attempted-recon; sid:200001072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alexinformatica.com.br",nocase; classtype:attempted-recon; sid:200001073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alfarouk-consulting.com",nocase; classtype:attempted-recon; sid:200001074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"algotextil.com.br",nocase; classtype:attempted-recon; sid:200001075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alharaj-alalmi.com",nocase; classtype:attempted-recon; sid:200001076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alialinedssc.com",nocase; classtype:attempted-recon; sid:200001077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alicaweb.my.id",nocase; classtype:attempted-recon; sid:200001078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aliciabot.azurewebsites.net",nocase; classtype:attempted-recon; sid:200001079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alimentosybebidasrefrespul.com",nocase; classtype:attempted-recon; sid:200001080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alinafischer.clickfunnels.com",nocase; classtype:attempted-recon; sid:200001081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"all4mothers.pk",nocase; classtype:attempted-recon; sid:200001082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allbrowardanimalremoval.com",nocase; classtype:attempted-recon; sid:200001083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allcustomimages.com",nocase; classtype:attempted-recon; sid:200001084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alleqrolokalnie.pl",nocase; classtype:attempted-recon; sid:200001085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allertsicuroapp-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200001086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alliancecreditunion.co.in",nocase; classtype:attempted-recon; sid:200001087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alliantenergy.com.sg",nocase; classtype:attempted-recon; sid:200001088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allnewsapple.shop",nocase; classtype:attempted-recon; sid:200001089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alltoupdatetokencoin.draydns.de",nocase; classtype:attempted-recon; sid:200001090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allwest-appraisal.com",nocase; classtype:attempted-recon; sid:200001091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"almotairy.com",nocase; classtype:attempted-recon; sid:200001092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alongcamevenus.com",nocase; classtype:attempted-recon; sid:200001093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aloun.ps",nocase; classtype:attempted-recon; sid:200001094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alpacaairdrop.live",nocase; classtype:attempted-recon; sid:200001095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alpha-centaury.likescandy.com",nocase; classtype:attempted-recon; sid:200001096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alsofft.com",nocase; classtype:attempted-recon; sid:200001097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"altecmetalltechnik-energiasolar.blogspot.com",nocase; classtype:attempted-recon; sid:200001098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"altivasoluciones.com",nocase; classtype:attempted-recon; sid:200001099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"altunhaliyikama.com.tr",nocase; classtype:attempted-recon; sid:200001100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aluminiumdoorrepairs.com.au",nocase; classtype:attempted-recon; sid:200001101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ama-zon-jp.life",nocase; classtype:attempted-recon; sid:200001102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amankan-akunfb-anda.webnode.page",nocase; classtype:attempted-recon; sid:200001103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amaozn.ywcimei.com",nocase; classtype:attempted-recon; sid:200001104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amaz-co.jp-ul.top",nocase; classtype:attempted-recon; sid:200001105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amaz0n-a0o.live",nocase; classtype:attempted-recon; sid:200001106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazan-jp.com",nocase; classtype:attempted-recon; sid:200001107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amaznoa-co.life",nocase; classtype:attempted-recon; sid:200001108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazo-jp.uuajfi.top",nocase; classtype:attempted-recon; sid:200001109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazo-n.jp-uh.top",nocase; classtype:attempted-recon; sid:200001110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazo-n.jp-uo.top",nocase; classtype:attempted-recon; sid:200001111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon-caseid368241.lnk.to",nocase; classtype:attempted-recon; sid:200001112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon-interruption.com",nocase; classtype:attempted-recon; sid:200001113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon-notifies-jp.com",nocase; classtype:attempted-recon; sid:200001114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.co.jp.amzenmemberverify.club",nocase; classtype:attempted-recon; sid:200001115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.co.jp.signin1.club",nocase; classtype:attempted-recon; sid:200001116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.ecppee.top",nocase; classtype:attempted-recon; sid:200001117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.jbvnap.shop",nocase; classtype:attempted-recon; sid:200001118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.jp-lh.top",nocase; classtype:attempted-recon; sid:200001119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.tomgoot.xyz",nocase; classtype:attempted-recon; sid:200001120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.tomyoot.xyz",nocase; classtype:attempted-recon; sid:200001121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.works.ga",nocase; classtype:attempted-recon; sid:200001122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.yesyoot.xyz",nocase; classtype:attempted-recon; sid:200001123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon.yuant.club",nocase; classtype:attempted-recon; sid:200001124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazon01ewqeww.top",nocase; classtype:attempted-recon; sid:200001125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazonb.gq",nocase; classtype:attempted-recon; sid:200001126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazonjpan.life",nocase; classtype:attempted-recon; sid:200001127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazonjpmy.com",nocase; classtype:attempted-recon; sid:200001128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazonseijapan.ml",nocase; classtype:attempted-recon; sid:200001129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazonseijapan.tk",nocase; classtype:attempted-recon; sid:200001130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazoo.co.jp.irvpbu.shop",nocase; classtype:attempted-recon; sid:200001131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amazooiu.coldest.cn",nocase; classtype:attempted-recon; sid:200001132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ambrrygen.com",nocase; classtype:attempted-recon; sid:200001133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ambrygen.care",nocase; classtype:attempted-recon; sid:200001134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amc-training.com",nocase; classtype:attempted-recon; sid:200001135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"americanheadhuntersllc.com",nocase; classtype:attempted-recon; sid:200001136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"americanwheelslogistics.com",nocase; classtype:attempted-recon; sid:200001137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amiao.vip",nocase; classtype:attempted-recon; sid:200001138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amidabuli.com",nocase; classtype:attempted-recon; sid:200001139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amlakazizi.ir",nocase; classtype:attempted-recon; sid:200001140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amm-uni.com",nocase; classtype:attempted-recon; sid:200001141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amma.asn.au",nocase; classtype:attempted-recon; sid:200001142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ammosorter.info",nocase; classtype:attempted-recon; sid:200001143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ammosorter.net",nocase; classtype:attempted-recon; sid:200001144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amosleh.com",nocase; classtype:attempted-recon; sid:200001145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amozon.co.g5l9ls.cn",nocase; classtype:attempted-recon; sid:200001146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amozon.co.ip.partney.shop",nocase; classtype:attempted-recon; sid:200001147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ampunbanaa.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200001148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amreeth.github.io",nocase; classtype:attempted-recon; sid:200001149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amrstewardshipuganda.org",nocase; classtype:attempted-recon; sid:200001150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amtrakaccount.com",nocase; classtype:attempted-recon; sid:200001151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amuledesd9834.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"amuzon.co.ip.ddmfjla.cn",nocase; classtype:attempted-recon; sid:200001153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ananda1.com",nocase; classtype:attempted-recon; sid:200001154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anandsr-dev.github.io",nocase; classtype:attempted-recon; sid:200001155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anapolisemprego.com.br",nocase; classtype:attempted-recon; sid:200001156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anarchitecturestudio.com",nocase; classtype:attempted-recon; sid:200001157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anatwoodcompany.com",nocase; classtype:attempted-recon; sid:200001158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anazon.co.jp.yahootv.com.cn",nocase; classtype:attempted-recon; sid:200001159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ancient-cloud-12a9.wdavis5428586.workers.dev",nocase; classtype:attempted-recon; sid:200001160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ancient.tybocas.workers.dev",nocase; classtype:attempted-recon; sid:200001161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"andersonstrategic.com.au",nocase; classtype:attempted-recon; sid:200001162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"andmantelionazxpionloasion.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"andmantelionazxpionloasion.web.app",nocase; classtype:attempted-recon; sid:200001164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anemiefalciformecanada.com",nocase; classtype:attempted-recon; sid:200001165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"angindatanglahh.martulangsore.workers.dev",nocase; classtype:attempted-recon; sid:200001166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anitabreack123.webcindario.com",nocase; classtype:attempted-recon; sid:200001167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anjalijha167.github.io",nocase; classtype:attempted-recon; sid:200001168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"antiolyppmontu.ml",nocase; classtype:attempted-recon; sid:200001169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anz-device.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anz-device.web.app",nocase; classtype:attempted-recon; sid:200001171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.chenmanqi.top",nocase; classtype:attempted-recon; sid:200001172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.rwmcr.top",nocase; classtype:attempted-recon; sid:200001173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.uvlhwb.top",nocase; classtype:attempted-recon; sid:200001174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.wiguyc.top",nocase; classtype:attempted-recon; sid:200001175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.wkbakq.top",nocase; classtype:attempted-recon; sid:200001176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.wmysah.top",nocase; classtype:attempted-recon; sid:200001177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.wotygl.top",nocase; classtype:attempted-recon; sid:200001178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.wozavw.top",nocase; classtype:attempted-recon; sid:200001179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.xfertf.top",nocase; classtype:attempted-recon; sid:200001180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.xloclk.top",nocase; classtype:attempted-recon; sid:200001181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.xovtfx.top",nocase; classtype:attempted-recon; sid:200001182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.xubnkg.top",nocase; classtype:attempted-recon; sid:200001183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.xvljph.top",nocase; classtype:attempted-recon; sid:200001184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.xvotal.top",nocase; classtype:attempted-recon; sid:200001185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.xwitwq.top",nocase; classtype:attempted-recon; sid:200001186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.ybmkwa.top",nocase; classtype:attempted-recon; sid:200001187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.ydpssl.top",nocase; classtype:attempted-recon; sid:200001188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.yfnvfr.top",nocase; classtype:attempted-recon; sid:200001189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.yfsjiq.top",nocase; classtype:attempted-recon; sid:200001190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.yqggww.top",nocase; classtype:attempted-recon; sid:200001191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.ytbspo.top",nocase; classtype:attempted-recon; sid:200001192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.yvpnxy.top",nocase; classtype:attempted-recon; sid:200001193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.yyyuwr.top",nocase; classtype:attempted-recon; sid:200001194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.yyzded.top",nocase; classtype:attempted-recon; sid:200001195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.zohlkk.top",nocase; classtype:attempted-recon; sid:200001196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.zpirok.top",nocase; classtype:attempted-recon; sid:200001197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.zrzckw.top",nocase; classtype:attempted-recon; sid:200001198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.zusrue.top",nocase; classtype:attempted-recon; sid:200001199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol1.godaddysites.com",nocase; classtype:attempted-recon; sid:200001200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol11.godaddysites.com",nocase; classtype:attempted-recon; sid:200001201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol141.godaddysites.com",nocase; classtype:attempted-recon; sid:200001202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol208.godaddysites.com",nocase; classtype:attempted-recon; sid:200001203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol21.godaddysites.com",nocase; classtype:attempted-recon; sid:200001204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol24.godaddysites.com",nocase; classtype:attempted-recon; sid:200001205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol25.godaddysites.com",nocase; classtype:attempted-recon; sid:200001206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol29.godaddysites.com",nocase; classtype:attempted-recon; sid:200001207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol351.godaddysites.com",nocase; classtype:attempted-recon; sid:200001208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol37.godaddysites.com",nocase; classtype:attempted-recon; sid:200001209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol4.godaddysites.com",nocase; classtype:attempted-recon; sid:200001210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol40.godaddysites.com",nocase; classtype:attempted-recon; sid:200001211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol45.godaddysites.com",nocase; classtype:attempted-recon; sid:200001212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol47.godaddysites.com",nocase; classtype:attempted-recon; sid:200001213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol50.godaddysites.com",nocase; classtype:attempted-recon; sid:200001214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol514.godaddysites.com",nocase; classtype:attempted-recon; sid:200001215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol56.godaddysites.com",nocase; classtype:attempted-recon; sid:200001216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol59.godaddysites.com",nocase; classtype:attempted-recon; sid:200001217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol6.godaddysites.com",nocase; classtype:attempted-recon; sid:200001218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol60.godaddysites.com",nocase; classtype:attempted-recon; sid:200001219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol61.godaddysites.com",nocase; classtype:attempted-recon; sid:200001220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol62.godaddysites.com",nocase; classtype:attempted-recon; sid:200001221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol65.godaddysites.com",nocase; classtype:attempted-recon; sid:200001222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol67.godaddysites.com",nocase; classtype:attempted-recon; sid:200001223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol68.godaddysites.com",nocase; classtype:attempted-recon; sid:200001224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol73.godaddysites.com",nocase; classtype:attempted-recon; sid:200001225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol738.godaddysites.com",nocase; classtype:attempted-recon; sid:200001226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol812.godaddysites.com",nocase; classtype:attempted-recon; sid:200001227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol85.godaddysites.com",nocase; classtype:attempted-recon; sid:200001228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol9.godaddysites.com",nocase; classtype:attempted-recon; sid:200001229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aol99.godaddysites.com",nocase; classtype:attempted-recon; sid:200001230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aolmail94irjrf.weebly.com",nocase; classtype:attempted-recon; sid:200001231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aolsezz.weebly.com",nocase; classtype:attempted-recon; sid:200001232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aolvoiceview.weebly.com",nocase; classtype:attempted-recon; sid:200001233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aolxperience.com",nocase; classtype:attempted-recon; sid:200001234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aolxxxxxxccc.weebly.com",nocase; classtype:attempted-recon; sid:200001235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aosouu-assoeosnuu-jp.nrtitml.md.ci",nocase; classtype:attempted-recon; sid:200001236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ap-bombcrypto-ol.blogspot.com",nocase; classtype:attempted-recon; sid:200001237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ape-club.io",nocase; classtype:attempted-recon; sid:200001238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apelive.io",nocase; classtype:attempted-recon; sid:200001239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api-game-verification.games",nocase; classtype:attempted-recon; sid:200001240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api.51.fi",nocase; classtype:attempted-recon; sid:200001241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api.collab-land.li",nocase; classtype:attempted-recon; sid:200001242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aplicativo.lifedecentralmerc.shop",nocase; classtype:attempted-recon; sid:200001243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apotheker-digital-id.firebaseapp.com",nocase; classtype:attempted-recon; sid:200001244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apotheker-digital-id.web.app",nocase; classtype:attempted-recon; sid:200001245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app--bombcrypto-io--acess.blogspot.com",nocase; classtype:attempted-recon; sid:200001246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-11.lawpwheq4b-rz83yll8e4d7.p.runcloud.link",nocase; classtype:attempted-recon; sid:200001247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-2.lawpwheq4b-rz83yll8e4d7.p.runcloud.link",nocase; classtype:attempted-recon; sid:200001248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-33.lawpwheq4b-rz83yll8e4d7.p.runcloud.link",nocase; classtype:attempted-recon; sid:200001249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-pancakeswap.org",nocase; classtype:attempted-recon; sid:200001250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-poly-g0nwebsite.blogspot.com",nocase; classtype:attempted-recon; sid:200001251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-susshi.com",nocase; classtype:attempted-recon; sid:200001252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app-zemlak.cgm9kvdxb6-ewx3l8v2m4zq.p.runcloud.link",nocase; classtype:attempted-recon; sid:200001253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.a-ave.com",nocase; classtype:attempted-recon; sid:200001254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.appsmartfixup.com",nocase; classtype:attempted-recon; sid:200001255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.assessmentgenerator.com",nocase; classtype:attempted-recon; sid:200001256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.bydn217.club",nocase; classtype:attempted-recon; sid:200001257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.mirorfinance.com",nocase; classtype:attempted-recon; sid:200001258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.moneylinecreditcorporation.com",nocase; classtype:attempted-recon; sid:200001259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.sugarsync.com",nocase; classtype:attempted-recon; sid:200001260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.sushi.com.omisbeta.com",nocase; classtype:attempted-recon; sid:200001261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.swap-biswap.org",nocase; classtype:attempted-recon; sid:200001262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.uniswape.org",nocase; classtype:attempted-recon; sid:200001263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.waiverforever.com",nocase; classtype:attempted-recon; sid:200001264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.walletdappfixed.net",nocase; classtype:attempted-recon; sid:200001265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.webwalletsauthenticate.com",nocase; classtype:attempted-recon; sid:200001266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app42.host",nocase; classtype:attempted-recon; sid:200001267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appeal-report-10184.herokuapp.com",nocase; classtype:attempted-recon; sid:200001268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appformetalivenew.cf",nocase; classtype:attempted-recon; sid:200001269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"apple-id5867-secure.com",nocase; classtype:attempted-recon; sid:200001270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appreter.rf.gd",nocase; classtype:attempted-recon; sid:200001271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appsco.asia",nocase; classtype:attempted-recon; sid:200001272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aprilfools.cf",nocase; classtype:attempted-recon; sid:200001273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aquarelle.es",nocase; classtype:attempted-recon; sid:200001274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aquatecns.com",nocase; classtype:attempted-recon; sid:200001275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aquzea.hyperphp.com",nocase; classtype:attempted-recon; sid:200001276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arafathrumman.github.io",nocase; classtype:attempted-recon; sid:200001277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"areaprocedura.000webhostapp.com",nocase; classtype:attempted-recon; sid:200001278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arfada.org",nocase; classtype:attempted-recon; sid:200001279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arkona-meb.ru",nocase; classtype:attempted-recon; sid:200001280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arlindovsky.net",nocase; classtype:attempted-recon; sid:200001281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"armenianfilmmaker.com",nocase; classtype:attempted-recon; sid:200001282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arnaldolanches.blogspot.com",nocase; classtype:attempted-recon; sid:200001283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arnazon.ktyuyt.cn",nocase; classtype:attempted-recon; sid:200001284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arre-9do.pages.dev",nocase; classtype:attempted-recon; sid:200001285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arrozsabanero.com",nocase; classtype:attempted-recon; sid:200001286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arsip.istannuqayah.ac.id",nocase; classtype:attempted-recon; sid:200001287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arthamahotels.com",nocase; classtype:attempted-recon; sid:200001288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"article10272010101002062010102.weebly.com",nocase; classtype:attempted-recon; sid:200001289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artist-rw.com",nocase; classtype:attempted-recon; sid:200001290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artpavement.ro",nocase; classtype:attempted-recon; sid:200001291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"artvirtualy.com",nocase; classtype:attempted-recon; sid:200001292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"arub-service.org",nocase; classtype:attempted-recon; sid:200001293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"as9192030.liveblog365.com",nocase; classtype:attempted-recon; sid:200001294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ascensionlcms.org",nocase; classtype:attempted-recon; sid:200001295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asdrewd.hostfree.pw",nocase; classtype:attempted-recon; sid:200001296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asesoams-aaossemsnrosn.ndmqtag.asso.ci",nocase; classtype:attempted-recon; sid:200001297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asiakirja-dile.godaddysites.com",nocase; classtype:attempted-recon; sid:200001298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asiakirjapyyntoe.godaddysites.com",nocase; classtype:attempted-recon; sid:200001299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"askarmotorluaraclar.com",nocase; classtype:attempted-recon; sid:200001300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"askeloj.cluster031.hosting.ovh.net",nocase; classtype:attempted-recon; sid:200001301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.0awwinj.com.cn",nocase; classtype:attempted-recon; sid:200001302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.0jw7a4gy.com.cn",nocase; classtype:attempted-recon; sid:200001303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.10jqkq.com.cn",nocase; classtype:attempted-recon; sid:200001304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.12530a.com.cn",nocase; classtype:attempted-recon; sid:200001305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.1510lpw.com.cn",nocase; classtype:attempted-recon; sid:200001306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.1jiajia.com.cn",nocase; classtype:attempted-recon; sid:200001307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.1kaca8n.com.cn",nocase; classtype:attempted-recon; sid:200001308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.1pmc6awo.com.cn",nocase; classtype:attempted-recon; sid:200001309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.258448.com.cn",nocase; classtype:attempted-recon; sid:200001310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.3rdeye.com.cn",nocase; classtype:attempted-recon; sid:200001311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.4yhmeni1.com.cn",nocase; classtype:attempted-recon; sid:200001312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.5ltzg4l.com.cn",nocase; classtype:attempted-recon; sid:200001313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.5ma8hy6.com.cn",nocase; classtype:attempted-recon; sid:200001314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.6gcwtdy2.com.cn",nocase; classtype:attempted-recon; sid:200001315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.7nydmjms.com.cn",nocase; classtype:attempted-recon; sid:200001316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.87crjh0i.com.cn",nocase; classtype:attempted-recon; sid:200001317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.96a2lk5h.com.cn",nocase; classtype:attempted-recon; sid:200001318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.999365.com.cn",nocase; classtype:attempted-recon; sid:200001319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.9pa4c7kf.com.cn",nocase; classtype:attempted-recon; sid:200001320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.adopen.com.cn",nocase; classtype:attempted-recon; sid:200001321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ae9jlc1w.com.cn",nocase; classtype:attempted-recon; sid:200001322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.aes9cm4h.com.cn",nocase; classtype:attempted-recon; sid:200001323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ajecm40.com.cn",nocase; classtype:attempted-recon; sid:200001324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.anasousa.com.cn",nocase; classtype:attempted-recon; sid:200001325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.anmg04.com.cn",nocase; classtype:attempted-recon; sid:200001326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.anmg74.com.cn",nocase; classtype:attempted-recon; sid:200001327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.anmg93.com.cn",nocase; classtype:attempted-recon; sid:200001328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.anmg95.com.cn",nocase; classtype:attempted-recon; sid:200001329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.astxgsl.com.cn",nocase; classtype:attempted-recon; sid:200001330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.b4krcmd.com.cn",nocase; classtype:attempted-recon; sid:200001331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.banguang.com.cn",nocase; classtype:attempted-recon; sid:200001332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.bianbeng.com.cn",nocase; classtype:attempted-recon; sid:200001333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.biepie.com.cn",nocase; classtype:attempted-recon; sid:200001334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.biotope.com.cn",nocase; classtype:attempted-recon; sid:200001335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.bjyyzs.com.cn",nocase; classtype:attempted-recon; sid:200001336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.caochui.com.cn",nocase; classtype:attempted-recon; sid:200001337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.catbjsc.com.cn",nocase; classtype:attempted-recon; sid:200001338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.cenben.com.cn",nocase; classtype:attempted-recon; sid:200001339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.cengcou.com.cn",nocase; classtype:attempted-recon; sid:200001340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.chaoah.com.cn",nocase; classtype:attempted-recon; sid:200001341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.chonlon.com.cn",nocase; classtype:attempted-recon; sid:200001342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.chuoyong.com.cn",nocase; classtype:attempted-recon; sid:200001343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.coolyes.com.cn",nocase; classtype:attempted-recon; sid:200001344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.cosmoveda.com.cn",nocase; classtype:attempted-recon; sid:200001345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.cpvuenr.com.cn",nocase; classtype:attempted-recon; sid:200001346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.cro6w8wf.com.cn",nocase; classtype:attempted-recon; sid:200001347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.cscdma.com.cn",nocase; classtype:attempted-recon; sid:200001348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.cz9s5fe.com.cn",nocase; classtype:attempted-recon; sid:200001349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.da4f8sw7.com.cn",nocase; classtype:attempted-recon; sid:200001350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.danfudun.com.cn",nocase; classtype:attempted-recon; sid:200001351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.dangrang.com.cn",nocase; classtype:attempted-recon; sid:200001352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.dapenti.com.cn",nocase; classtype:attempted-recon; sid:200001353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.dascrede.com.cn",nocase; classtype:attempted-recon; sid:200001354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.dbcdpnq.com.cn",nocase; classtype:attempted-recon; sid:200001355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.dnmkwf1o.com.cn",nocase; classtype:attempted-recon; sid:200001356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.dyetieba.com.cn",nocase; classtype:attempted-recon; sid:200001357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.dz5e4pdb.com.cn",nocase; classtype:attempted-recon; sid:200001358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.dzcfpx.com.cn",nocase; classtype:attempted-recon; sid:200001359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.e-ara.com.cn",nocase; classtype:attempted-recon; sid:200001360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.eczifkk8.com.cn",nocase; classtype:attempted-recon; sid:200001361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ehbyz34.com.cn",nocase; classtype:attempted-recon; sid:200001362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ekwjci.com.cn",nocase; classtype:attempted-recon; sid:200001363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.elourwb.com.cn",nocase; classtype:attempted-recon; sid:200001364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.exlrtf.com.cn",nocase; classtype:attempted-recon; sid:200001365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.fchzjdlo.com.cn",nocase; classtype:attempted-recon; sid:200001366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ffffound.com.cn",nocase; classtype:attempted-recon; sid:200001367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.firson.com.cn",nocase; classtype:attempted-recon; sid:200001368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.foupian.com.cn",nocase; classtype:attempted-recon; sid:200001369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.g2ahwmfl.com.cn",nocase; classtype:attempted-recon; sid:200001370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ganghuan.com.cn",nocase; classtype:attempted-recon; sid:200001371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.gesbjzrc.com.cn",nocase; classtype:attempted-recon; sid:200001372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ghnclwyp.com.cn",nocase; classtype:attempted-recon; sid:200001373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.goldieas.com.cn",nocase; classtype:attempted-recon; sid:200001374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.goshico.com.cn",nocase; classtype:attempted-recon; sid:200001375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.goucun.com.cn",nocase; classtype:attempted-recon; sid:200001376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.gungou.com.cn",nocase; classtype:attempted-recon; sid:200001377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.guoxuwang.com.cn",nocase; classtype:attempted-recon; sid:200001378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.gzrongyi.com.cn",nocase; classtype:attempted-recon; sid:200001379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.h9c6l1jl.com.cn",nocase; classtype:attempted-recon; sid:200001380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.hanguoxxw.com.cn",nocase; classtype:attempted-recon; sid:200001381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.hbixwjd.com.cn",nocase; classtype:attempted-recon; sid:200001382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.hjpgggg.com.cn",nocase; classtype:attempted-recon; sid:200001383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.hmzoye.com.cn",nocase; classtype:attempted-recon; sid:200001384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.hncysq.com.cn",nocase; classtype:attempted-recon; sid:200001385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.hnhyxy.com.cn",nocase; classtype:attempted-recon; sid:200001386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.hotfax.com.cn",nocase; classtype:attempted-recon; sid:200001387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.hotitem.com.cn",nocase; classtype:attempted-recon; sid:200001388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.huaihun.com.cn",nocase; classtype:attempted-recon; sid:200001389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.huanzhuan.com.cn",nocase; classtype:attempted-recon; sid:200001390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.hunluan.com.cn",nocase; classtype:attempted-recon; sid:200001391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.hwblfwzy.com.cn",nocase; classtype:attempted-recon; sid:200001392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ielts100.com.cn",nocase; classtype:attempted-recon; sid:200001393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ig9sez43.com.cn",nocase; classtype:attempted-recon; sid:200001394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.jiayitu.com.cn",nocase; classtype:attempted-recon; sid:200001395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.jiongmen.com.cn",nocase; classtype:attempted-recon; sid:200001396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.jiongzhui.com.cn",nocase; classtype:attempted-recon; sid:200001397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.jiqingba.com.cn",nocase; classtype:attempted-recon; sid:200001398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.jpt5dfae.com.cn",nocase; classtype:attempted-recon; sid:200001399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.king-cos.com.cn",nocase; classtype:attempted-recon; sid:200001400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.kinoptik.com.cn",nocase; classtype:attempted-recon; sid:200001401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.kmjsk.com.cn",nocase; classtype:attempted-recon; sid:200001402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.koreaego.com.cn",nocase; classtype:attempted-recon; sid:200001403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ks3000.com.cn",nocase; classtype:attempted-recon; sid:200001404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.kzntsjpw.com.cn",nocase; classtype:attempted-recon; sid:200001405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.land-sky.com.cn",nocase; classtype:attempted-recon; sid:200001406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.laohuji8.com.cn",nocase; classtype:attempted-recon; sid:200001407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.lcjuyi.com.cn",nocase; classtype:attempted-recon; sid:200001408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.lifelle.com.cn",nocase; classtype:attempted-recon; sid:200001409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.lingzuier.com.cn",nocase; classtype:attempted-recon; sid:200001410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.lintuo.com.cn",nocase; classtype:attempted-recon; sid:200001411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.liupen.com.cn",nocase; classtype:attempted-recon; sid:200001412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ljnnfx.com.cn",nocase; classtype:attempted-recon; sid:200001413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.louchun.com.cn",nocase; classtype:attempted-recon; sid:200001414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.luanzhi.com.cn",nocase; classtype:attempted-recon; sid:200001415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.lygclean.com.cn",nocase; classtype:attempted-recon; sid:200001416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.lyjzsjy.com.cn",nocase; classtype:attempted-recon; sid:200001417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.lyrlzy.com.cn",nocase; classtype:attempted-recon; sid:200001418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.masang.com.cn",nocase; classtype:attempted-recon; sid:200001419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.menboo.com.cn",nocase; classtype:attempted-recon; sid:200001420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.mfdamjse.com.cn",nocase; classtype:attempted-recon; sid:200001421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.mgm985.com.cn",nocase; classtype:attempted-recon; sid:200001422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.mintiao.com.cn",nocase; classtype:attempted-recon; sid:200001423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.moshuai.com.cn",nocase; classtype:attempted-recon; sid:200001424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.mouruo.com.cn",nocase; classtype:attempted-recon; sid:200001425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.mzbk4sk5.com.cn",nocase; classtype:attempted-recon; sid:200001426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.n45piai5.com.cn",nocase; classtype:attempted-recon; sid:200001427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.na1p4wo0.com.cn",nocase; classtype:attempted-recon; sid:200001428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nangkong.com.cn",nocase; classtype:attempted-recon; sid:200001429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nankingtr.com.cn",nocase; classtype:attempted-recon; sid:200001430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nasjwj.com.cn",nocase; classtype:attempted-recon; sid:200001431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nbabjs.com.cn",nocase; classtype:attempted-recon; sid:200001432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nenfou.com.cn",nocase; classtype:attempted-recon; sid:200001433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nenghun.com.cn",nocase; classtype:attempted-recon; sid:200001434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nengluan.com.cn",nocase; classtype:attempted-recon; sid:200001435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nenshao.com.cn",nocase; classtype:attempted-recon; sid:200001436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.newdate.com.cn",nocase; classtype:attempted-recon; sid:200001437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.niaoshuai.com.cn",nocase; classtype:attempted-recon; sid:200001438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.niaoza.com.cn",nocase; classtype:attempted-recon; sid:200001439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.njanrui.com.cn",nocase; classtype:attempted-recon; sid:200001440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nmhoi6c1.com.cn",nocase; classtype:attempted-recon; sid:200001441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nmok1lw.com.cn",nocase; classtype:attempted-recon; sid:200001442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nongceng.com.cn",nocase; classtype:attempted-recon; sid:200001443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.nongzong.com.cn",nocase; classtype:attempted-recon; sid:200001444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.o2ospace.com.cn",nocase; classtype:attempted-recon; sid:200001445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.onlymaya.com.cn",nocase; classtype:attempted-recon; sid:200001446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.pangzhuo.com.cn",nocase; classtype:attempted-recon; sid:200001447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.pocketmac.com.cn",nocase; classtype:attempted-recon; sid:200001448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.pocketpc.com.cn",nocase; classtype:attempted-recon; sid:200001449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.pzcwk0j.com.cn",nocase; classtype:attempted-recon; sid:200001450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.qicheye.com.cn",nocase; classtype:attempted-recon; sid:200001451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.qiongran.com.cn",nocase; classtype:attempted-recon; sid:200001452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ruogan.com.cn",nocase; classtype:attempted-recon; sid:200001453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.saichuo.com.cn",nocase; classtype:attempted-recon; sid:200001454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.sechuang.com.cn",nocase; classtype:attempted-recon; sid:200001455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.skyhunter.com.cn",nocase; classtype:attempted-recon; sid:200001456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.sl-motor.com.cn",nocase; classtype:attempted-recon; sid:200001457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.snowtiger.com.cn",nocase; classtype:attempted-recon; sid:200001458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.soujiong.com.cn",nocase; classtype:attempted-recon; sid:200001459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.tayd5cw1.com.cn",nocase; classtype:attempted-recon; sid:200001460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.tcyn6mf.com.cn",nocase; classtype:attempted-recon; sid:200001461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.tiffki.com.cn",nocase; classtype:attempted-recon; sid:200001462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.topdpd.com.cn",nocase; classtype:attempted-recon; sid:200001463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.trip4u.com.cn",nocase; classtype:attempted-recon; sid:200001464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.tushu010.com.cn",nocase; classtype:attempted-recon; sid:200001465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.tydfblog.com.cn",nocase; classtype:attempted-recon; sid:200001466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.tyehl2ma.com.cn",nocase; classtype:attempted-recon; sid:200001467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.tzom4nab.com.cn",nocase; classtype:attempted-recon; sid:200001468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.uxgzqnx.com.cn",nocase; classtype:attempted-recon; sid:200001469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.v8muscle.com.cn",nocase; classtype:attempted-recon; sid:200001470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.vyiqjfc.com.cn",nocase; classtype:attempted-recon; sid:200001471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.wdtjwo86.com.cn",nocase; classtype:attempted-recon; sid:200001472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.weiseng.com.cn",nocase; classtype:attempted-recon; sid:200001473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.wengniao.com.cn",nocase; classtype:attempted-recon; sid:200001474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.woodfire.com.cn",nocase; classtype:attempted-recon; sid:200001475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.wtp017fn.com.cn",nocase; classtype:attempted-recon; sid:200001476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.wuxiaozhu.com.cn",nocase; classtype:attempted-recon; sid:200001477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.x140le.com.cn",nocase; classtype:attempted-recon; sid:200001478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.xiashua.com.cn",nocase; classtype:attempted-recon; sid:200001479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.xiesui.com.cn",nocase; classtype:attempted-recon; sid:200001480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.xyekod.com.cn",nocase; classtype:attempted-recon; sid:200001481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.y9j1sctf.com.cn",nocase; classtype:attempted-recon; sid:200001482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.yishuboli.com.cn",nocase; classtype:attempted-recon; sid:200001483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ylfapiao.com.cn",nocase; classtype:attempted-recon; sid:200001484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ym8i2wmc.com.cn",nocase; classtype:attempted-recon; sid:200001485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.yuezhun.com.cn",nocase; classtype:attempted-recon; sid:200001486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.zhcw76.com.cn",nocase; classtype:attempted-recon; sid:200001487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.zhounen.com.cn",nocase; classtype:attempted-recon; sid:200001488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.zhuanniao.com.cn",nocase; classtype:attempted-recon; sid:200001489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.zy5i7d9b.com.cn",nocase; classtype:attempted-recon; sid:200001490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.0571pf.com.cn",nocase; classtype:attempted-recon; sid:200001491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.0awwinj.com.cn",nocase; classtype:attempted-recon; sid:200001492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.10jqkq.com.cn",nocase; classtype:attempted-recon; sid:200001493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.12530a.com.cn",nocase; classtype:attempted-recon; sid:200001494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.24pl5id2.com.cn",nocase; classtype:attempted-recon; sid:200001495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.258448.com.cn",nocase; classtype:attempted-recon; sid:200001496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.2rf7hec9.com.cn",nocase; classtype:attempted-recon; sid:200001497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.2rml4wyj.com.cn",nocase; classtype:attempted-recon; sid:200001498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.41sj8oo5.com.cn",nocase; classtype:attempted-recon; sid:200001499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.467tuligo.com.cn",nocase; classtype:attempted-recon; sid:200001500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.4j7rdtcl.com.cn",nocase; classtype:attempted-recon; sid:200001501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.4yhmeni1.com.cn",nocase; classtype:attempted-recon; sid:200001502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.51cpjm.com.cn",nocase; classtype:attempted-recon; sid:200001503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.51plan.com.cn",nocase; classtype:attempted-recon; sid:200001504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.5ltzg4l.com.cn",nocase; classtype:attempted-recon; sid:200001505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.5ma8hy6.com.cn",nocase; classtype:attempted-recon; sid:200001506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.62omc5cj.com.cn",nocase; classtype:attempted-recon; sid:200001507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.6gcwtdy2.com.cn",nocase; classtype:attempted-recon; sid:200001508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.7nydmjms.com.cn",nocase; classtype:attempted-recon; sid:200001509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.7r9wbdfl.com.cn",nocase; classtype:attempted-recon; sid:200001510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.87crjh0i.com.cn",nocase; classtype:attempted-recon; sid:200001511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.96a2lk5h.com.cn",nocase; classtype:attempted-recon; sid:200001512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.999365.com.cn",nocase; classtype:attempted-recon; sid:200001513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.99zixue.com.cn",nocase; classtype:attempted-recon; sid:200001514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ae9jlc1w.com.cn",nocase; classtype:attempted-recon; sid:200001515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.aes9cm4h.com.cn",nocase; classtype:attempted-recon; sid:200001516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.air-com.com.cn",nocase; classtype:attempted-recon; sid:200001517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.al41wzli.com.cn",nocase; classtype:attempted-recon; sid:200001518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.anasousa.com.cn",nocase; classtype:attempted-recon; sid:200001519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.anggun.com.cn",nocase; classtype:attempted-recon; sid:200001520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.anmg04.com.cn",nocase; classtype:attempted-recon; sid:200001521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.anmg61.com.cn",nocase; classtype:attempted-recon; sid:200001522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.beatle.com.cn",nocase; classtype:attempted-recon; sid:200001523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.biotope.com.cn",nocase; classtype:attempted-recon; sid:200001524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.bjyyzs.com.cn",nocase; classtype:attempted-recon; sid:200001525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.bluelaser.com.cn",nocase; classtype:attempted-recon; sid:200001526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.c6a7km15.com.cn",nocase; classtype:attempted-recon; sid:200001527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.caochui.com.cn",nocase; classtype:attempted-recon; sid:200001528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.catbjsc.com.cn",nocase; classtype:attempted-recon; sid:200001529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.cengce.com.cn",nocase; classtype:attempted-recon; sid:200001530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.cengcong.com.cn",nocase; classtype:attempted-recon; sid:200001531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ch1twwgm.com.cn",nocase; classtype:attempted-recon; sid:200001532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.chaoah.com.cn",nocase; classtype:attempted-recon; sid:200001533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.chonlon.com.cn",nocase; classtype:attempted-recon; sid:200001534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.chuzai.com.cn",nocase; classtype:attempted-recon; sid:200001535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.commtown.com.cn",nocase; classtype:attempted-recon; sid:200001536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.coolyes.com.cn",nocase; classtype:attempted-recon; sid:200001537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.cosmoveda.com.cn",nocase; classtype:attempted-recon; sid:200001538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.cpvuenr.com.cn",nocase; classtype:attempted-recon; sid:200001539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.cro6w8wf.com.cn",nocase; classtype:attempted-recon; sid:200001540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.cscdma.com.cn",nocase; classtype:attempted-recon; sid:200001541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.cxqingxi.com.cn",nocase; classtype:attempted-recon; sid:200001542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.cz9s5fe.com.cn",nocase; classtype:attempted-recon; sid:200001543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.czqylaw.com.cn",nocase; classtype:attempted-recon; sid:200001544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.dangrang.com.cn",nocase; classtype:attempted-recon; sid:200001545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.diaozuan.com.cn",nocase; classtype:attempted-recon; sid:200001546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.dz5e4pdb.com.cn",nocase; classtype:attempted-recon; sid:200001547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.dzcfpx.com.cn",nocase; classtype:attempted-recon; sid:200001548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.e-ara.com.cn",nocase; classtype:attempted-recon; sid:200001549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.e0z5m6w.com.cn",nocase; classtype:attempted-recon; sid:200001550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ekwjci.com.cn",nocase; classtype:attempted-recon; sid:200001551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.elourwb.com.cn",nocase; classtype:attempted-recon; sid:200001552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.exlrtf.com.cn",nocase; classtype:attempted-recon; sid:200001553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.fchzjdlo.com.cn",nocase; classtype:attempted-recon; sid:200001554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.findsky.com.cn",nocase; classtype:attempted-recon; sid:200001555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.flyrov.com.cn",nocase; classtype:attempted-recon; sid:200001556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.g08m4wm7.com.cn",nocase; classtype:attempted-recon; sid:200001557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.g2ahwmfl.com.cn",nocase; classtype:attempted-recon; sid:200001558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ge7r4k6k.com.cn",nocase; classtype:attempted-recon; sid:200001559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.gesbjzrc.com.cn",nocase; classtype:attempted-recon; sid:200001560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.goldieas.com.cn",nocase; classtype:attempted-recon; sid:200001561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.goshico.com.cn",nocase; classtype:attempted-recon; sid:200001562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.guashui.com.cn",nocase; classtype:attempted-recon; sid:200001563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.gungou.com.cn",nocase; classtype:attempted-recon; sid:200001564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.gzrongyi.com.cn",nocase; classtype:attempted-recon; sid:200001565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.haivli.com.cn",nocase; classtype:attempted-recon; sid:200001566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.hanyimg.com.cn",nocase; classtype:attempted-recon; sid:200001567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.hnhyxy.com.cn",nocase; classtype:attempted-recon; sid:200001568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.huaiwai.com.cn",nocase; classtype:attempted-recon; sid:200001569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.hunluan.com.cn",nocase; classtype:attempted-recon; sid:200001570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ielts100.com.cn",nocase; classtype:attempted-recon; sid:200001571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ifj2n1zk.com.cn",nocase; classtype:attempted-recon; sid:200001572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.in-me.com.cn",nocase; classtype:attempted-recon; sid:200001573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.jiayitu.com.cn",nocase; classtype:attempted-recon; sid:200001574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.jpt5dfae.com.cn",nocase; classtype:attempted-recon; sid:200001575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.juancui.com.cn",nocase; classtype:attempted-recon; sid:200001576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.juejiong.com.cn",nocase; classtype:attempted-recon; sid:200001577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.jwdbxg.com.cn",nocase; classtype:attempted-recon; sid:200001578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.kado-icl.com.cn",nocase; classtype:attempted-recon; sid:200001579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.kmjsk.com.cn",nocase; classtype:attempted-recon; sid:200001580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.koreaego.com.cn",nocase; classtype:attempted-recon; sid:200001581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.kzntsjpw.com.cn",nocase; classtype:attempted-recon; sid:200001582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.land-sky.com.cn",nocase; classtype:attempted-recon; sid:200001583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.laohuji8.com.cn",nocase; classtype:attempted-recon; sid:200001584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.lcjuyi.com.cn",nocase; classtype:attempted-recon; sid:200001585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.lkklpfp.com.cn",nocase; classtype:attempted-recon; sid:200001586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.louchun.com.cn",nocase; classtype:attempted-recon; sid:200001587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.lyjzsjy.com.cn",nocase; classtype:attempted-recon; sid:200001588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.m806h5p8.com.cn",nocase; classtype:attempted-recon; sid:200001589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.masang.com.cn",nocase; classtype:attempted-recon; sid:200001590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.mcgwkyyk.com.cn",nocase; classtype:attempted-recon; sid:200001591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.memberly.com.cn",nocase; classtype:attempted-recon; sid:200001592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.menboo.com.cn",nocase; classtype:attempted-recon; sid:200001593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.menduimen.com.cn",nocase; classtype:attempted-recon; sid:200001594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.mintiao.com.cn",nocase; classtype:attempted-recon; sid:200001595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ms6p7zd1.com.cn",nocase; classtype:attempted-recon; sid:200001596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.mycarz.com.cn",nocase; classtype:attempted-recon; sid:200001597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.myglgw.com.cn",nocase; classtype:attempted-recon; sid:200001598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.mzbk4sk5.com.cn",nocase; classtype:attempted-recon; sid:200001599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.n45piai5.com.cn",nocase; classtype:attempted-recon; sid:200001600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.n4a1ab3k.com.cn",nocase; classtype:attempted-recon; sid:200001601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.naishan.com.cn",nocase; classtype:attempted-recon; sid:200001602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.nangrun.com.cn",nocase; classtype:attempted-recon; sid:200001603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.nankingtr.com.cn",nocase; classtype:attempted-recon; sid:200001604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.nasjwj.com.cn",nocase; classtype:attempted-recon; sid:200001605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.nbabjs.com.cn",nocase; classtype:attempted-recon; sid:200001606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ncvkfm.com.cn",nocase; classtype:attempted-recon; sid:200001607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.nenfou.com.cn",nocase; classtype:attempted-recon; sid:200001608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.nengluan.com.cn",nocase; classtype:attempted-recon; sid:200001609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.nenshao.com.cn",nocase; classtype:attempted-recon; sid:200001610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.newdate.com.cn",nocase; classtype:attempted-recon; sid:200001611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.niaodiao.com.cn",nocase; classtype:attempted-recon; sid:200001612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.nljprmjk.com.cn",nocase; classtype:attempted-recon; sid:200001613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.nmhoi6c1.com.cn",nocase; classtype:attempted-recon; sid:200001614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ntours.com.cn",nocase; classtype:attempted-recon; sid:200001615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.onetrip.com.cn",nocase; classtype:attempted-recon; sid:200001616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.p104ac0c.com.cn",nocase; classtype:attempted-recon; sid:200001617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.pabw6yo.com.cn",nocase; classtype:attempted-recon; sid:200001618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.pangzhuo.com.cn",nocase; classtype:attempted-recon; sid:200001619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.pocketpc.com.cn",nocase; classtype:attempted-recon; sid:200001620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.pzai72m5.com.cn",nocase; classtype:attempted-recon; sid:200001621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.qinghetea.com.cn",nocase; classtype:attempted-recon; sid:200001622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ruanlue.com.cn",nocase; classtype:attempted-recon; sid:200001623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.rwbwdeca.com.cn",nocase; classtype:attempted-recon; sid:200001624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.rxjh4f.com.cn",nocase; classtype:attempted-recon; sid:200001625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.sechuang.com.cn",nocase; classtype:attempted-recon; sid:200001626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.shuanpeng.com.cn",nocase; classtype:attempted-recon; sid:200001627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.simante.com.cn",nocase; classtype:attempted-recon; sid:200001628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.skyhunter.com.cn",nocase; classtype:attempted-recon; sid:200001629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.sondaflex.com.cn",nocase; classtype:attempted-recon; sid:200001630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.songnuan.com.cn",nocase; classtype:attempted-recon; sid:200001631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.soujiong.com.cn",nocase; classtype:attempted-recon; sid:200001632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.soutie.com.cn",nocase; classtype:attempted-recon; sid:200001633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.sunroys.com.cn",nocase; classtype:attempted-recon; sid:200001634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.t1egk637.com.cn",nocase; classtype:attempted-recon; sid:200001635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.tayd5cw1.com.cn",nocase; classtype:attempted-recon; sid:200001636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.tcyn6mf.com.cn",nocase; classtype:attempted-recon; sid:200001637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.tha9s0kc.com.cn",nocase; classtype:attempted-recon; sid:200001638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.theraplex.com.cn",nocase; classtype:attempted-recon; sid:200001639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.tn51wpw7.com.cn",nocase; classtype:attempted-recon; sid:200001640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.topdpd.com.cn",nocase; classtype:attempted-recon; sid:200001641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.tushu010.com.cn",nocase; classtype:attempted-recon; sid:200001642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.tyehl2ma.com.cn",nocase; classtype:attempted-recon; sid:200001643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.v8muscle.com.cn",nocase; classtype:attempted-recon; sid:200001644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.vyiqjfc.com.cn",nocase; classtype:attempted-recon; sid:200001645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.waizong.com.cn",nocase; classtype:attempted-recon; sid:200001646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.wengniao.com.cn",nocase; classtype:attempted-recon; sid:200001647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.wmfoankc.com.cn",nocase; classtype:attempted-recon; sid:200001648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.woboshi.com.cn",nocase; classtype:attempted-recon; sid:200001649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.wodfpl3.com.cn",nocase; classtype:attempted-recon; sid:200001650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ws-f.com.cn",nocase; classtype:attempted-recon; sid:200001651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.x140le.com.cn",nocase; classtype:attempted-recon; sid:200001652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.y9j1sctf.com.cn",nocase; classtype:attempted-recon; sid:200001653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.yimingedu.com.cn",nocase; classtype:attempted-recon; sid:200001654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ylfapiao.com.cn",nocase; classtype:attempted-recon; sid:200001655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.zaicha.com.cn",nocase; classtype:attempted-recon; sid:200001656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.zgqclbjw.com.cn",nocase; classtype:attempted-recon; sid:200001657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.zhengshao.com.cn",nocase; classtype:attempted-recon; sid:200001658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.zhusdz.com.cn",nocase; classtype:attempted-recon; sid:200001659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.zimifx.com.cn",nocase; classtype:attempted-recon; sid:200001660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.zonlc8yo.com.cn",nocase; classtype:attempted-recon; sid:200001661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.zy5i7d9b.com.cn",nocase; classtype:attempted-recon; sid:200001662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asrerocha.tk",nocase; classtype:attempted-recon; sid:200001663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"assessoriabradesco.net",nocase; classtype:attempted-recon; sid:200001664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"assetsrestore.org",nocase; classtype:attempted-recon; sid:200001665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"astrdrop.net",nocase; classtype:attempted-recon; sid:200001666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asuka-kohsan.co.jp",nocase; classtype:attempted-recon; sid:200001667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at-service.recoveryatt.workers.dev",nocase; classtype:attempted-recon; sid:200001668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at-t-support-service1.sitey.me",nocase; classtype:attempted-recon; sid:200001669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at-t-yahoo.sitey.me",nocase; classtype:attempted-recon; sid:200001670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at0.srev.workers.dev",nocase; classtype:attempted-recon; sid:200001671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ateliedaface.com",nocase; classtype:attempted-recon; sid:200001672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atendimento-bradesco.topmidia.tv.br",nocase; classtype:attempted-recon; sid:200001673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atendimentodigital.me",nocase; classtype:attempted-recon; sid:200001674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atendimentofacil.me",nocase; classtype:attempted-recon; sid:200001675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atento-fdi.plusoftomni.com.br",nocase; classtype:attempted-recon; sid:200001676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atereaz67.cf",nocase; classtype:attempted-recon; sid:200001677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atitudepress.com.br",nocase; classtype:attempted-recon; sid:200001678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atm-i.com",nocase; classtype:attempted-recon; sid:200001679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atmosphericnight.cf",nocase; classtype:attempted-recon; sid:200001680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atnr76dxku336szy.clickfunnels.com",nocase; classtype:attempted-recon; sid:200001681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atomdenki.conohawing.com",nocase; classtype:attempted-recon; sid:200001682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atosgenerators.com",nocase; classtype:attempted-recon; sid:200001683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-103818.square.site",nocase; classtype:attempted-recon; sid:200001684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-109553.weeblysite.com",nocase; classtype:attempted-recon; sid:200001685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-account.com",nocase; classtype:attempted-recon; sid:200001686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-yahoo-mail-106134.square.site",nocase; classtype:attempted-recon; sid:200001687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att.con-account.workers.dev",nocase; classtype:attempted-recon; sid:200001688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att1.sitey.me",nocase; classtype:attempted-recon; sid:200001689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attemplate.com",nocase; classtype:attempted-recon; sid:200001690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attempted-logon-check.com",nocase; classtype:attempted-recon; sid:200001691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attivadati2022.com",nocase; classtype:attempted-recon; sid:200001692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmailads.weebly.com",nocase; classtype:attempted-recon; sid:200001693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmailchangeserviceserttingsss.square.site",nocase; classtype:attempted-recon; sid:200001694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attmailvbxd.weebly.com",nocase; classtype:attempted-recon; sid:200001695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attndattndatt.weebly.com",nocase; classtype:attempted-recon; sid:200001696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attsecurityeweb.weebly.com",nocase; classtype:attempted-recon; sid:200001697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attserviceupdate.webflow.io",nocase; classtype:attempted-recon; sid:200001698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"attyahhoomaiil.weebly.com",nocase; classtype:attempted-recon; sid:200001699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.056291.cn",nocase; classtype:attempted-recon; sid:200001700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.3gcu.cn",nocase; classtype:attempted-recon; sid:200001701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.465699.cn",nocase; classtype:attempted-recon; sid:200001702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.52gongyi.cn",nocase; classtype:attempted-recon; sid:200001703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.5hij.cn",nocase; classtype:attempted-recon; sid:200001704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.5vdzh.cn",nocase; classtype:attempted-recon; sid:200001705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.605150.cn",nocase; classtype:attempted-recon; sid:200001706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.79rme3.cn",nocase; classtype:attempted-recon; sid:200001707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.aabpviy.cn",nocase; classtype:attempted-recon; sid:200001708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.abrdnplc.cn",nocase; classtype:attempted-recon; sid:200001709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.acqthvo.cn",nocase; classtype:attempted-recon; sid:200001710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.afgpwox.cn",nocase; classtype:attempted-recon; sid:200001711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.afmgtka.cn",nocase; classtype:attempted-recon; sid:200001712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.afsbnwt.cn",nocase; classtype:attempted-recon; sid:200001713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ahgztph.cn",nocase; classtype:attempted-recon; sid:200001714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ai016.cn",nocase; classtype:attempted-recon; sid:200001715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ai200.cn",nocase; classtype:attempted-recon; sid:200001716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ai678.cn",nocase; classtype:attempted-recon; sid:200001717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ai726.cn",nocase; classtype:attempted-recon; sid:200001718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ai965.cn",nocase; classtype:attempted-recon; sid:200001719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ajyodcd.cn",nocase; classtype:attempted-recon; sid:200001720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.amijpoa.cn",nocase; classtype:attempted-recon; sid:200001721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.amkxdom.cn",nocase; classtype:attempted-recon; sid:200001722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.an029.cn",nocase; classtype:attempted-recon; sid:200001723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.an398.cn",nocase; classtype:attempted-recon; sid:200001724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.an548.cn",nocase; classtype:attempted-recon; sid:200001725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ankiaaz.cn",nocase; classtype:attempted-recon; sid:200001726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.anprpci.cn",nocase; classtype:attempted-recon; sid:200001727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ao218.cn",nocase; classtype:attempted-recon; sid:200001728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ao524.cn",nocase; classtype:attempted-recon; sid:200001729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.apcrm.cn",nocase; classtype:attempted-recon; sid:200001730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.aukowyb.cn",nocase; classtype:attempted-recon; sid:200001731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.avgazzx.cn",nocase; classtype:attempted-recon; sid:200001732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.awadmwz.cn",nocase; classtype:attempted-recon; sid:200001733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.awfppmi.cn",nocase; classtype:attempted-recon; sid:200001734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.axnnt.cn",nocase; classtype:attempted-recon; sid:200001735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.baramff.cn",nocase; classtype:attempted-recon; sid:200001736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bd8438l.cn",nocase; classtype:attempted-recon; sid:200001737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bdgce.cn",nocase; classtype:attempted-recon; sid:200001738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bfipeik.cn",nocase; classtype:attempted-recon; sid:200001739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bfqiiga.cn",nocase; classtype:attempted-recon; sid:200001740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bgcrm.cn",nocase; classtype:attempted-recon; sid:200001741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bheoyhi.cn",nocase; classtype:attempted-recon; sid:200001742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.biaoshikeji.cn",nocase; classtype:attempted-recon; sid:200001743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.binegdd.cn",nocase; classtype:attempted-recon; sid:200001744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.biyhiqz.cn",nocase; classtype:attempted-recon; sid:200001745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bkrbzdg.cn",nocase; classtype:attempted-recon; sid:200001746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bmscrm.cn",nocase; classtype:attempted-recon; sid:200001747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bnbtmdp.cn",nocase; classtype:attempted-recon; sid:200001748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bnxisjp.cn",nocase; classtype:attempted-recon; sid:200001749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bocfbyw.cn",nocase; classtype:attempted-recon; sid:200001750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.boxpdfl.cn",nocase; classtype:attempted-recon; sid:200001751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.boy007.cn",nocase; classtype:attempted-recon; sid:200001752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bqcrm.cn",nocase; classtype:attempted-recon; sid:200001753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bqrieoi.cn",nocase; classtype:attempted-recon; sid:200001754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bscnrdr.cn",nocase; classtype:attempted-recon; sid:200001755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.bsscrm.cn",nocase; classtype:attempted-recon; sid:200001756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.caizhuceccp.cn",nocase; classtype:attempted-recon; sid:200001757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.camrqrg.cn",nocase; classtype:attempted-recon; sid:200001758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.cbscrm.cn",nocase; classtype:attempted-recon; sid:200001759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.cdsbupy.cn",nocase; classtype:attempted-recon; sid:200001760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.cfbroxn.cn",nocase; classtype:attempted-recon; sid:200001761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.cfkmy.cn",nocase; classtype:attempted-recon; sid:200001762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.cfscrm.cn",nocase; classtype:attempted-recon; sid:200001763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.chscrm.cn",nocase; classtype:attempted-recon; sid:200001764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.cilcjim.cn",nocase; classtype:attempted-recon; sid:200001765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ciscrm.cn",nocase; classtype:attempted-recon; sid:200001766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ckrthcx.cn",nocase; classtype:attempted-recon; sid:200001767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ckscrm.cn",nocase; classtype:attempted-recon; sid:200001768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ctaalwa.cn",nocase; classtype:attempted-recon; sid:200001769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.cwahfgt.cn",nocase; classtype:attempted-recon; sid:200001770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.cwscrm.cn",nocase; classtype:attempted-recon; sid:200001771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.cwytiyo.cn",nocase; classtype:attempted-recon; sid:200001772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.czihzaw.cn",nocase; classtype:attempted-recon; sid:200001773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.dbscrm.cn",nocase; classtype:attempted-recon; sid:200001774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.descrm.cn",nocase; classtype:attempted-recon; sid:200001775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.dfvskmf.cn",nocase; classtype:attempted-recon; sid:200001776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.dgmuhdn.cn",nocase; classtype:attempted-recon; sid:200001777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.dhluxrl.cn",nocase; classtype:attempted-recon; sid:200001778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.digbnqe.cn",nocase; classtype:attempted-recon; sid:200001779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.dlntqkq.cn",nocase; classtype:attempted-recon; sid:200001780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.dnnydvd.cn",nocase; classtype:attempted-recon; sid:200001781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.dnykipu.cn",nocase; classtype:attempted-recon; sid:200001782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.dpscrm.cn",nocase; classtype:attempted-recon; sid:200001783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.drscrm.cn",nocase; classtype:attempted-recon; sid:200001784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.eaecwtk.cn",nocase; classtype:attempted-recon; sid:200001785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ei738.cn",nocase; classtype:attempted-recon; sid:200001786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ei873.cn",nocase; classtype:attempted-recon; sid:200001787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ei939.cn",nocase; classtype:attempted-recon; sid:200001788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.eisxlov.cn",nocase; classtype:attempted-recon; sid:200001789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.emdesdy.cn",nocase; classtype:attempted-recon; sid:200001790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.en318.cn",nocase; classtype:attempted-recon; sid:200001791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.en387.cn",nocase; classtype:attempted-recon; sid:200001792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.en944.cn",nocase; classtype:attempted-recon; sid:200001793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.eqgtlqf.cn",nocase; classtype:attempted-recon; sid:200001794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.er080.cn",nocase; classtype:attempted-recon; sid:200001795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.er265.cn",nocase; classtype:attempted-recon; sid:200001796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.er728.cn",nocase; classtype:attempted-recon; sid:200001797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.evnxvpn.cn",nocase; classtype:attempted-recon; sid:200001798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.evvtawu.cn",nocase; classtype:attempted-recon; sid:200001799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.exeklhm.cn",nocase; classtype:attempted-recon; sid:200001800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ezlqvdi.cn",nocase; classtype:attempted-recon; sid:200001801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.f2ztqqztyn.cn",nocase; classtype:attempted-recon; sid:200001802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.fbwvhts.cn",nocase; classtype:attempted-recon; sid:200001803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ffvwaqe.cn",nocase; classtype:attempted-recon; sid:200001804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.findrecord.cn",nocase; classtype:attempted-recon; sid:200001805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.fjygela.cn",nocase; classtype:attempted-recon; sid:200001806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.fkqmfgn.cn",nocase; classtype:attempted-recon; sid:200001807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.fkqpzof.cn",nocase; classtype:attempted-recon; sid:200001808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.fndgbrn.cn",nocase; classtype:attempted-recon; sid:200001809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.fpecxfs.cn",nocase; classtype:attempted-recon; sid:200001810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.fthjzzq.cn",nocase; classtype:attempted-recon; sid:200001811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.fuonsmn.cn",nocase; classtype:attempted-recon; sid:200001812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.fwcrm.cn",nocase; classtype:attempted-recon; sid:200001813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.fwscrm.cn",nocase; classtype:attempted-recon; sid:200001814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.fxllvmg.cn",nocase; classtype:attempted-recon; sid:200001815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.gcilyyb.cn",nocase; classtype:attempted-recon; sid:200001816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.gfyedjb.cn",nocase; classtype:attempted-recon; sid:200001817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.gjgtj.cn",nocase; classtype:attempted-recon; sid:200001818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.gklkmiq.cn",nocase; classtype:attempted-recon; sid:200001819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.gkmrbql.cn",nocase; classtype:attempted-recon; sid:200001820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.gukatif.cn",nocase; classtype:attempted-recon; sid:200001821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.hhbessl.cn",nocase; classtype:attempted-recon; sid:200001822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.hm51.cn",nocase; classtype:attempted-recon; sid:200001823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.hpcrm.cn",nocase; classtype:attempted-recon; sid:200001824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.hue4hr.cn",nocase; classtype:attempted-recon; sid:200001825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.hxhxtnw.cn",nocase; classtype:attempted-recon; sid:200001826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.hxuafto.cn",nocase; classtype:attempted-recon; sid:200001827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.hypayy.cn",nocase; classtype:attempted-recon; sid:200001828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.hyvjtuo.cn",nocase; classtype:attempted-recon; sid:200001829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ie040.cn",nocase; classtype:attempted-recon; sid:200001830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ie105.cn",nocase; classtype:attempted-recon; sid:200001831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ie488.cn",nocase; classtype:attempted-recon; sid:200001832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ie686.cn",nocase; classtype:attempted-recon; sid:200001833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ie805.cn",nocase; classtype:attempted-recon; sid:200001834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ie889.cn",nocase; classtype:attempted-recon; sid:200001835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ijezfcd.cn",nocase; classtype:attempted-recon; sid:200001836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.in252.cn",nocase; classtype:attempted-recon; sid:200001837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.in418.cn",nocase; classtype:attempted-recon; sid:200001838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.in459.cn",nocase; classtype:attempted-recon; sid:200001839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.in627.cn",nocase; classtype:attempted-recon; sid:200001840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.iu252.cn",nocase; classtype:attempted-recon; sid:200001841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.iu903.cn",nocase; classtype:attempted-recon; sid:200001842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jadnseb.cn",nocase; classtype:attempted-recon; sid:200001843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jdifhvv.cn",nocase; classtype:attempted-recon; sid:200001844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jffnrmc.cn",nocase; classtype:attempted-recon; sid:200001845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jfjalqt.cn",nocase; classtype:attempted-recon; sid:200001846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jgbvxxn.cn",nocase; classtype:attempted-recon; sid:200001847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jiqbeti.cn",nocase; classtype:attempted-recon; sid:200001848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jiztcjp.cn",nocase; classtype:attempted-recon; sid:200001849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.joxcfbj.cn",nocase; classtype:attempted-recon; sid:200001850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jqiqkwu.cn",nocase; classtype:attempted-recon; sid:200001851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jsscrm.cn",nocase; classtype:attempted-recon; sid:200001852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jtxfegz.cn",nocase; classtype:attempted-recon; sid:200001853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jwihyht.cn",nocase; classtype:attempted-recon; sid:200001854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jwlryyo.cn",nocase; classtype:attempted-recon; sid:200001855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jxzlnin.cn",nocase; classtype:attempted-recon; sid:200001856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jzaipvz.cn",nocase; classtype:attempted-recon; sid:200001857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.jzscrm.cn",nocase; classtype:attempted-recon; sid:200001858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.kakbabr.cn",nocase; classtype:attempted-recon; sid:200001859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.kaosrzp.cn",nocase; classtype:attempted-recon; sid:200001860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.kciwckl.cn",nocase; classtype:attempted-recon; sid:200001861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.kdscrm.cn",nocase; classtype:attempted-recon; sid:200001862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.kmscrm.cn",nocase; classtype:attempted-recon; sid:200001863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.kpbsirx.cn",nocase; classtype:attempted-recon; sid:200001864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.kpghvzg.cn",nocase; classtype:attempted-recon; sid:200001865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ksscrm.cn",nocase; classtype:attempted-recon; sid:200001866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ktygqcv.cn",nocase; classtype:attempted-recon; sid:200001867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.kujvwnw.cn",nocase; classtype:attempted-recon; sid:200001868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.kvedmbp.cn",nocase; classtype:attempted-recon; sid:200001869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.kxscrm.cn",nocase; classtype:attempted-recon; sid:200001870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ldscrm.cn",nocase; classtype:attempted-recon; sid:200001871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.licrm.cn",nocase; classtype:attempted-recon; sid:200001872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ljjusob.cn",nocase; classtype:attempted-recon; sid:200001873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.llyypnt.cn",nocase; classtype:attempted-recon; sid:200001874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.lmdadjo.cn",nocase; classtype:attempted-recon; sid:200001875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.lnkwiqn.cn",nocase; classtype:attempted-recon; sid:200001876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.lotrxnm.cn",nocase; classtype:attempted-recon; sid:200001877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.lpnbtrh.cn",nocase; classtype:attempted-recon; sid:200001878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.lpscrm.cn",nocase; classtype:attempted-recon; sid:200001879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.lqcrm.cn",nocase; classtype:attempted-recon; sid:200001880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.lrncwij.cn",nocase; classtype:attempted-recon; sid:200001881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.lrscrm.cn",nocase; classtype:attempted-recon; sid:200001882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.lsscrm.cn",nocase; classtype:attempted-recon; sid:200001883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.lxcrm.cn",nocase; classtype:attempted-recon; sid:200001884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mbi96w.cn",nocase; classtype:attempted-recon; sid:200001885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mcmk7t.cn",nocase; classtype:attempted-recon; sid:200001886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mcscrm.cn",nocase; classtype:attempted-recon; sid:200001887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mepyjp.cn",nocase; classtype:attempted-recon; sid:200001888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mfgqwdn.cn",nocase; classtype:attempted-recon; sid:200001889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mhcrm.cn",nocase; classtype:attempted-recon; sid:200001890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.miwtzig.cn",nocase; classtype:attempted-recon; sid:200001891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mjkzvhn.cn",nocase; classtype:attempted-recon; sid:200001892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mlscrm.cn",nocase; classtype:attempted-recon; sid:200001893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mpcrm.cn",nocase; classtype:attempted-recon; sid:200001894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mpscrm.cn",nocase; classtype:attempted-recon; sid:200001895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mpssydh.cn",nocase; classtype:attempted-recon; sid:200001896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mqscrm.cn",nocase; classtype:attempted-recon; sid:200001897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mtsyygo.cn",nocase; classtype:attempted-recon; sid:200001898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.muscrm.cn",nocase; classtype:attempted-recon; sid:200001899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.mwcrm.cn",nocase; classtype:attempted-recon; sid:200001900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.nacrm.cn",nocase; classtype:attempted-recon; sid:200001901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.nlcrm.cn",nocase; classtype:attempted-recon; sid:200001902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.noxafev.cn",nocase; classtype:attempted-recon; sid:200001903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.nqshmbx.cn",nocase; classtype:attempted-recon; sid:200001904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.nqyhyy.cn",nocase; classtype:attempted-recon; sid:200001905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ntovkoh.cn",nocase; classtype:attempted-recon; sid:200001906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.nvsbxqp.cn",nocase; classtype:attempted-recon; sid:200001907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.nwoxcoy.cn",nocase; classtype:attempted-recon; sid:200001908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.nxfbrdv.cn",nocase; classtype:attempted-recon; sid:200001909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.nxvtrhz.cn",nocase; classtype:attempted-recon; sid:200001910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.nyscrm.cn",nocase; classtype:attempted-recon; sid:200001911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.nzscrm.cn",nocase; classtype:attempted-recon; sid:200001912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ogxycee.cn",nocase; classtype:attempted-recon; sid:200001913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ojwxnxk.cn",nocase; classtype:attempted-recon; sid:200001914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.okwwvxw.cn",nocase; classtype:attempted-recon; sid:200001915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ong355.cn",nocase; classtype:attempted-recon; sid:200001916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ong561.cn",nocase; classtype:attempted-recon; sid:200001917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.onvzhtd.cn",nocase; classtype:attempted-recon; sid:200001918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.opyjqkd.cn",nocase; classtype:attempted-recon; sid:200001919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ou234.cn",nocase; classtype:attempted-recon; sid:200001920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ou407.cn",nocase; classtype:attempted-recon; sid:200001921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ou583.cn",nocase; classtype:attempted-recon; sid:200001922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ou865.cn",nocase; classtype:attempted-recon; sid:200001923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ou920.cn",nocase; classtype:attempted-recon; sid:200001924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ou998.cn",nocase; classtype:attempted-recon; sid:200001925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.p9sdwu.cn",nocase; classtype:attempted-recon; sid:200001926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.pcscrm.cn",nocase; classtype:attempted-recon; sid:200001927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.pdfwklh.cn",nocase; classtype:attempted-recon; sid:200001928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.pkcrm.cn",nocase; classtype:attempted-recon; sid:200001929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.plcrm.cn",nocase; classtype:attempted-recon; sid:200001930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.pqrsjxx.cn",nocase; classtype:attempted-recon; sid:200001931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.q3cltwly6s.cn",nocase; classtype:attempted-recon; sid:200001932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.qjawxef.cn",nocase; classtype:attempted-recon; sid:200001933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.rapvveq.cn",nocase; classtype:attempted-recon; sid:200001934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.rccjmsp.cn",nocase; classtype:attempted-recon; sid:200001935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.rcvuuim.cn",nocase; classtype:attempted-recon; sid:200001936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.rotnogf.cn",nocase; classtype:attempted-recon; sid:200001937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.rqzkmjn.cn",nocase; classtype:attempted-recon; sid:200001938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.rrcnqbs.cn",nocase; classtype:attempted-recon; sid:200001939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.rrqgqpx.cn",nocase; classtype:attempted-recon; sid:200001940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ruuapyx.cn",nocase; classtype:attempted-recon; sid:200001941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.s8e1a5p.cn",nocase; classtype:attempted-recon; sid:200001942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.sdw96i.cn",nocase; classtype:attempted-recon; sid:200001943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.sfcrm.cn",nocase; classtype:attempted-recon; sid:200001944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.shhkj.cn",nocase; classtype:attempted-recon; sid:200001945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.skluvff.cn",nocase; classtype:attempted-recon; sid:200001946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.slscrm.cn",nocase; classtype:attempted-recon; sid:200001947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.smqzqch.cn",nocase; classtype:attempted-recon; sid:200001948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.spscrm.cn",nocase; classtype:attempted-recon; sid:200001949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.sqscrm.cn",nocase; classtype:attempted-recon; sid:200001950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.swwofkq.cn",nocase; classtype:attempted-recon; sid:200001951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.sxscrm.cn",nocase; classtype:attempted-recon; sid:200001952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.szdimzr.cn",nocase; classtype:attempted-recon; sid:200001953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.tgcrm.cn",nocase; classtype:attempted-recon; sid:200001954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.thageeo.cn",nocase; classtype:attempted-recon; sid:200001955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.tjkdrpt.cn",nocase; classtype:attempted-recon; sid:200001956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.txwrogb.cn",nocase; classtype:attempted-recon; sid:200001957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.tzf0dz.cn",nocase; classtype:attempted-recon; sid:200001958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.tzf0ep.cn",nocase; classtype:attempted-recon; sid:200001959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.tzf0es.cn",nocase; classtype:attempted-recon; sid:200001960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.tzf0fs.cn",nocase; classtype:attempted-recon; sid:200001961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.tzf0ft.cn",nocase; classtype:attempted-recon; sid:200001962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.tzf0he.cn",nocase; classtype:attempted-recon; sid:200001963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.tzf0hn.cn",nocase; classtype:attempted-recon; sid:200001964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ubgkciu.cn",nocase; classtype:attempted-recon; sid:200001965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ucvkl.cn",nocase; classtype:attempted-recon; sid:200001966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.uflqchx.cn",nocase; classtype:attempted-recon; sid:200001967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ui133.cn",nocase; classtype:attempted-recon; sid:200001968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ui273.cn",nocase; classtype:attempted-recon; sid:200001969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ui578.cn",nocase; classtype:attempted-recon; sid:200001970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ui739.cn",nocase; classtype:attempted-recon; sid:200001971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ulj8t4x.cn",nocase; classtype:attempted-recon; sid:200001972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.umawwiw.cn",nocase; classtype:attempted-recon; sid:200001973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.un027.cn",nocase; classtype:attempted-recon; sid:200001974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.un066.cn",nocase; classtype:attempted-recon; sid:200001975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.un075.cn",nocase; classtype:attempted-recon; sid:200001976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.un818.cn",nocase; classtype:attempted-recon; sid:200001977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.updjwfi.cn",nocase; classtype:attempted-recon; sid:200001978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.upiea.cn",nocase; classtype:attempted-recon; sid:200001979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.uqzljen.cn",nocase; classtype:attempted-recon; sid:200001980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.uriapzp.cn",nocase; classtype:attempted-recon; sid:200001981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.uswvchc.cn",nocase; classtype:attempted-recon; sid:200001982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.vcqvwyr.cn",nocase; classtype:attempted-recon; sid:200001983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.vdbinft.cn",nocase; classtype:attempted-recon; sid:200001984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.vdkycem.cn",nocase; classtype:attempted-recon; sid:200001985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ve006.cn",nocase; classtype:attempted-recon; sid:200001986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ve036.cn",nocase; classtype:attempted-recon; sid:200001987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ve055.cn",nocase; classtype:attempted-recon; sid:200001988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ve260.cn",nocase; classtype:attempted-recon; sid:200001989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ve373.cn",nocase; classtype:attempted-recon; sid:200001990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ve749.cn",nocase; classtype:attempted-recon; sid:200001991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ve919.cn",nocase; classtype:attempted-recon; sid:200001992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ve938.cn",nocase; classtype:attempted-recon; sid:200001993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ve994.cn",nocase; classtype:attempted-recon; sid:200001994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.vgkqptk.cn",nocase; classtype:attempted-recon; sid:200001995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.vkfiqkn.cn",nocase; classtype:attempted-recon; sid:200001996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.vn066.cn",nocase; classtype:attempted-recon; sid:200001997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.vqonamz.cn",nocase; classtype:attempted-recon; sid:200001998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.vqonyrb.cn",nocase; classtype:attempted-recon; sid:200001999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.vyylgzm.cn",nocase; classtype:attempted-recon; sid:200002000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.vzcnhle.cn",nocase; classtype:attempted-recon; sid:200002001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.wczhfsq.cn",nocase; classtype:attempted-recon; sid:200002002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.whnjs.cn",nocase; classtype:attempted-recon; sid:200002003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.wjcufdu.cn",nocase; classtype:attempted-recon; sid:200002004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.wnscrm.cn",nocase; classtype:attempted-recon; sid:200002005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.wpxnmfo.cn",nocase; classtype:attempted-recon; sid:200002006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.wqjozol.cn",nocase; classtype:attempted-recon; sid:200002007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.wwbitna.cn",nocase; classtype:attempted-recon; sid:200002008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.wxkobh.cn",nocase; classtype:attempted-recon; sid:200002009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.wy277.cn",nocase; classtype:attempted-recon; sid:200002010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.wztkbqn.cn",nocase; classtype:attempted-recon; sid:200002011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xfxsssd.cn",nocase; classtype:attempted-recon; sid:200002012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xgscrm.cn",nocase; classtype:attempted-recon; sid:200002013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xiqd6j.cn",nocase; classtype:attempted-recon; sid:200002014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xjg4.cn",nocase; classtype:attempted-recon; sid:200002015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xkscrm.cn",nocase; classtype:attempted-recon; sid:200002016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xktnq.cn",nocase; classtype:attempted-recon; sid:200002017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xltbcgh.cn",nocase; classtype:attempted-recon; sid:200002018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xmxoijs.cn",nocase; classtype:attempted-recon; sid:200002019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xpcrm.cn",nocase; classtype:attempted-recon; sid:200002020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xsafm.cn",nocase; classtype:attempted-recon; sid:200002021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xukdkik.cn",nocase; classtype:attempted-recon; sid:200002022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xwdtyu.cn",nocase; classtype:attempted-recon; sid:200002023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xxmcpdb.cn",nocase; classtype:attempted-recon; sid:200002024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.xxpbj.cn",nocase; classtype:attempted-recon; sid:200002025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yhfmefs.cn",nocase; classtype:attempted-recon; sid:200002026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yjcrm.cn",nocase; classtype:attempted-recon; sid:200002027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yjwffbg.cn",nocase; classtype:attempted-recon; sid:200002028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yjycgzk.cn",nocase; classtype:attempted-recon; sid:200002029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ylrwtqu.cn",nocase; classtype:attempted-recon; sid:200002030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yltpphc.cn",nocase; classtype:attempted-recon; sid:200002031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yntct.cn",nocase; classtype:attempted-recon; sid:200002032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yoavbpw.cn",nocase; classtype:attempted-recon; sid:200002033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yogacoach.cn",nocase; classtype:attempted-recon; sid:200002034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yqscrm.cn",nocase; classtype:attempted-recon; sid:200002035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yrytjq.cn",nocase; classtype:attempted-recon; sid:200002036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.ytscrm.cn",nocase; classtype:attempted-recon; sid:200002037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yucs18.cn",nocase; classtype:attempted-recon; sid:200002038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.yzscrm.cn",nocase; classtype:attempted-recon; sid:200002039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zcxpuxo.cn",nocase; classtype:attempted-recon; sid:200002040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zdkefgn.cn",nocase; classtype:attempted-recon; sid:200002041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zdxcuva.cn",nocase; classtype:attempted-recon; sid:200002042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zgxadco.cn",nocase; classtype:attempted-recon; sid:200002043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zihvkxz.cn",nocase; classtype:attempted-recon; sid:200002044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zqkd4.cn",nocase; classtype:attempted-recon; sid:200002045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zqxbkti.cn",nocase; classtype:attempted-recon; sid:200002046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zsgydwr.cn",nocase; classtype:attempted-recon; sid:200002047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zsmgxru.cn",nocase; classtype:attempted-recon; sid:200002048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zwlrdvh.cn",nocase; classtype:attempted-recon; sid:200002049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zxsybxc.cn",nocase; classtype:attempted-recon; sid:200002050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-auoneo.zzvcrqk.cn",nocase; classtype:attempted-recon; sid:200002051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-jp.embfsjy.cn",nocase; classtype:attempted-recon; sid:200002052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au-pay-jp.frgkqkl.cn",nocase; classtype:attempted-recon; sid:200002053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"au.com.jesdsqb.cn",nocase; classtype:attempted-recon; sid:200002054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aucblzx.hclcsolutions.com",nocase; classtype:attempted-recon; sid:200002055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"audience-crouch.dvrlists.com",nocase; classtype:attempted-recon; sid:200002056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aui493849934324zim.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aui493849934324zim.web.app",nocase; classtype:attempted-recon; sid:200002058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aulamed.com.mx",nocase; classtype:attempted-recon; sid:200002059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aumenta.hostfree.pw",nocase; classtype:attempted-recon; sid:200002060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aumentocupo20221.hostfree.pw",nocase; classtype:attempted-recon; sid:200002061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aumentocupotuya.hostfree.pw",nocase; classtype:attempted-recon; sid:200002062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aumentolendario.com",nocase; classtype:attempted-recon; sid:200002063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auntmarydistribution.com",nocase; classtype:attempted-recon; sid:200002064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.11rbsubzmx.cn",nocase; classtype:attempted-recon; sid:200002065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.biscrm.cn",nocase; classtype:attempted-recon; sid:200002066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.dxftrpt.cn",nocase; classtype:attempted-recon; sid:200002067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.en596.cn",nocase; classtype:attempted-recon; sid:200002068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.erxnlwr.cn",nocase; classtype:attempted-recon; sid:200002069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.fggqdah.cn",nocase; classtype:attempted-recon; sid:200002070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.fuueqxy.cn",nocase; classtype:attempted-recon; sid:200002071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.gdwrbvt.cn",nocase; classtype:attempted-recon; sid:200002072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.gljcpye.cn",nocase; classtype:attempted-recon; sid:200002073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.hgzexju.cn",nocase; classtype:attempted-recon; sid:200002074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.hirawtj.cn",nocase; classtype:attempted-recon; sid:200002075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.pgplg.cn",nocase; classtype:attempted-recon; sid:200002076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.pzungzj.cn",nocase; classtype:attempted-recon; sid:200002077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.qbvsn.cn",nocase; classtype:attempted-recon; sid:200002078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.samulrf.cn",nocase; classtype:attempted-recon; sid:200002079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.sjrjcjt.cn",nocase; classtype:attempted-recon; sid:200002080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.tgekieh.cn",nocase; classtype:attempted-recon; sid:200002081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.txdimck.cn",nocase; classtype:attempted-recon; sid:200002082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aupay-update-jp.yheiwsu.cn",nocase; classtype:attempted-recon; sid:200002083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auraschoolpmna.com",nocase; classtype:attempted-recon; sid:200002084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aureliengaborit.fr",nocase; classtype:attempted-recon; sid:200002085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"austinl33.github.io",nocase; classtype:attempted-recon; sid:200002086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-document-shared.datingg-voice.workers.dev",nocase; classtype:attempted-recon; sid:200002087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-login-0t1nnwrd3znvr4g598gygyey1em0jzsm782d38867qx.website.yandexcloud.net",nocase; classtype:attempted-recon; sid:200002088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-task1-m.web.app",nocase; classtype:attempted-recon; sid:200002089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"auth-user-54.com",nocase; classtype:attempted-recon; sid:200002090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authcitizenbank.com",nocase; classtype:attempted-recon; sid:200002091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticate-0oxsoxauthe.pages.dev",nocase; classtype:attempted-recon; sid:200002092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email1.web.app",nocase; classtype:attempted-recon; sid:200002094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email10.web.app",nocase; classtype:attempted-recon; sid:200002096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email11.web.app",nocase; classtype:attempted-recon; sid:200002098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email12.web.app",nocase; classtype:attempted-recon; sid:200002100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email13.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email13.web.app",nocase; classtype:attempted-recon; sid:200002102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email14.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email14.web.app",nocase; classtype:attempted-recon; sid:200002104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email15.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email15.web.app",nocase; classtype:attempted-recon; sid:200002106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email16.web.app",nocase; classtype:attempted-recon; sid:200002108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email17.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email17.web.app",nocase; classtype:attempted-recon; sid:200002110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email18.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email18.web.app",nocase; classtype:attempted-recon; sid:200002112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email19.web.app",nocase; classtype:attempted-recon; sid:200002114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email2.web.app",nocase; classtype:attempted-recon; sid:200002116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email21.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email21.web.app",nocase; classtype:attempted-recon; sid:200002118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email22.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email22.web.app",nocase; classtype:attempted-recon; sid:200002120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email23.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email23.web.app",nocase; classtype:attempted-recon; sid:200002122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email24.web.app",nocase; classtype:attempted-recon; sid:200002124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email25.web.app",nocase; classtype:attempted-recon; sid:200002126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email26.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email26.web.app",nocase; classtype:attempted-recon; sid:200002128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email27.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email27.web.app",nocase; classtype:attempted-recon; sid:200002130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email28.web.app",nocase; classtype:attempted-recon; sid:200002132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email29.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email29.web.app",nocase; classtype:attempted-recon; sid:200002134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email3.web.app",nocase; classtype:attempted-recon; sid:200002136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email30.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email30.web.app",nocase; classtype:attempted-recon; sid:200002138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email31.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email31.web.app",nocase; classtype:attempted-recon; sid:200002140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email32.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email32.web.app",nocase; classtype:attempted-recon; sid:200002142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email33.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email33.web.app",nocase; classtype:attempted-recon; sid:200002144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email34.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email34.web.app",nocase; classtype:attempted-recon; sid:200002146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email35.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email35.web.app",nocase; classtype:attempted-recon; sid:200002148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email36.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email36.web.app",nocase; classtype:attempted-recon; sid:200002150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email37.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email37.web.app",nocase; classtype:attempted-recon; sid:200002152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email38.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email38.web.app",nocase; classtype:attempted-recon; sid:200002154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email39.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email39.web.app",nocase; classtype:attempted-recon; sid:200002156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email4.web.app",nocase; classtype:attempted-recon; sid:200002158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email40.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email40.web.app",nocase; classtype:attempted-recon; sid:200002160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email42.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email42.web.app",nocase; classtype:attempted-recon; sid:200002162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email43.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email43.web.app",nocase; classtype:attempted-recon; sid:200002164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email44.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email44.web.app",nocase; classtype:attempted-recon; sid:200002166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email45.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email45.web.app",nocase; classtype:attempted-recon; sid:200002168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email46.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email46.web.app",nocase; classtype:attempted-recon; sid:200002170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email48.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email48.web.app",nocase; classtype:attempted-recon; sid:200002172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email49.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email49.web.app",nocase; classtype:attempted-recon; sid:200002174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email5.web.app",nocase; classtype:attempted-recon; sid:200002176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email50.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email50.web.app",nocase; classtype:attempted-recon; sid:200002178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email51.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email51.web.app",nocase; classtype:attempted-recon; sid:200002180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email52.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email52.web.app",nocase; classtype:attempted-recon; sid:200002182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email53.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email53.web.app",nocase; classtype:attempted-recon; sid:200002184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email54.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email54.web.app",nocase; classtype:attempted-recon; sid:200002186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email55.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email55.web.app",nocase; classtype:attempted-recon; sid:200002188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email57.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email57.web.app",nocase; classtype:attempted-recon; sid:200002190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email58.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email58.web.app",nocase; classtype:attempted-recon; sid:200002192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email59.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email59.web.app",nocase; classtype:attempted-recon; sid:200002194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email6.web.app",nocase; classtype:attempted-recon; sid:200002196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email60.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email60.web.app",nocase; classtype:attempted-recon; sid:200002198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email61.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email61.web.app",nocase; classtype:attempted-recon; sid:200002200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email62.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email62.web.app",nocase; classtype:attempted-recon; sid:200002202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email63.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email63.web.app",nocase; classtype:attempted-recon; sid:200002204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email64.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email64.web.app",nocase; classtype:attempted-recon; sid:200002206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email66.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email66.web.app",nocase; classtype:attempted-recon; sid:200002208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email67.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email67.web.app",nocase; classtype:attempted-recon; sid:200002210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email69.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email69.web.app",nocase; classtype:attempted-recon; sid:200002212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email7.web.app",nocase; classtype:attempted-recon; sid:200002214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email70.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email70.web.app",nocase; classtype:attempted-recon; sid:200002216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email71.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email71.web.app",nocase; classtype:attempted-recon; sid:200002218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email72.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email72.web.app",nocase; classtype:attempted-recon; sid:200002220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email73.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email73.web.app",nocase; classtype:attempted-recon; sid:200002222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email74.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email74.web.app",nocase; classtype:attempted-recon; sid:200002224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email75.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email75.web.app",nocase; classtype:attempted-recon; sid:200002226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email76.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email76.web.app",nocase; classtype:attempted-recon; sid:200002228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email77.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email77.web.app",nocase; classtype:attempted-recon; sid:200002230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email78.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email78.web.app",nocase; classtype:attempted-recon; sid:200002232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email79.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email79.web.app",nocase; classtype:attempted-recon; sid:200002234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email8.web.app",nocase; classtype:attempted-recon; sid:200002236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email80.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email80.web.app",nocase; classtype:attempted-recon; sid:200002238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email81.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email81.web.app",nocase; classtype:attempted-recon; sid:200002240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email82.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email82.web.app",nocase; classtype:attempted-recon; sid:200002242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email83.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email83.web.app",nocase; classtype:attempted-recon; sid:200002244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email84.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email84.web.app",nocase; classtype:attempted-recon; sid:200002246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email85.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email85.web.app",nocase; classtype:attempted-recon; sid:200002248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email86.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email86.web.app",nocase; classtype:attempted-recon; sid:200002250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email87.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email87.web.app",nocase; classtype:attempted-recon; sid:200002252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email88.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email88.web.app",nocase; classtype:attempted-recon; sid:200002254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email89.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email89.web.app",nocase; classtype:attempted-recon; sid:200002256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email9.web.app",nocase; classtype:attempted-recon; sid:200002258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email90.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email90.web.app",nocase; classtype:attempted-recon; sid:200002260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email91.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email91.web.app",nocase; classtype:attempted-recon; sid:200002262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email92.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email92.web.app",nocase; classtype:attempted-recon; sid:200002264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email93.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email93.web.app",nocase; classtype:attempted-recon; sid:200002266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email94.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email94.web.app",nocase; classtype:attempted-recon; sid:200002268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email96.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email96.web.app",nocase; classtype:attempted-recon; sid:200002270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email98.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email98.web.app",nocase; classtype:attempted-recon; sid:200002272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email99.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authenticator-email99.web.app",nocase; classtype:attempted-recon; sid:200002274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authorise-logon-access.com",nocase; classtype:attempted-recon; sid:200002275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authosritative-admin.longmusic.com",nocase; classtype:attempted-recon; sid:200002276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"authuxeehmutconjxmailssocl.web.app",nocase; classtype:attempted-recon; sid:200002277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autodiscover.jaam.mn",nocase; classtype:attempted-recon; sid:200002278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autodiscover.ryder-dutton.co.uk",nocase; classtype:attempted-recon; sid:200002279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoexprs.com",nocase; classtype:attempted-recon; sid:200002280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoranplususeremailprocessingupdate.pages.dev",nocase; classtype:attempted-recon; sid:200002281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autoscurt24.de",nocase; classtype:attempted-recon; sid:200002282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autovj.com",nocase; classtype:attempted-recon; sid:200002283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"autumn-sun-4a21.paqesads-scure.workers.dev",nocase; classtype:attempted-recon; sid:200002284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"avisaboneee.blogspot.com",nocase; classtype:attempted-recon; sid:200002285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"awesome-leaders.com",nocase; classtype:attempted-recon; sid:200002286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"awlzbug.top",nocase; classtype:attempted-recon; sid:200002287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axeielneflnity.com",nocase; classtype:attempted-recon; sid:200002288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axia-land.blogspot.com",nocase; classtype:attempted-recon; sid:200002289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axie-infinity.ru",nocase; classtype:attempted-recon; sid:200002290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axie-infinityinc.com",nocase; classtype:attempted-recon; sid:200002291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axie-land-page.blogspot.com",nocase; classtype:attempted-recon; sid:200002292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfiniltyw.com",nocase; classtype:attempted-recon; sid:200002293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinily.net",nocase; classtype:attempted-recon; sid:200002294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinity.simt.ind.in",nocase; classtype:attempted-recon; sid:200002295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinity.vc",nocase; classtype:attempted-recon; sid:200002296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinity1.com",nocase; classtype:attempted-recon; sid:200002297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinitydownload.net",nocase; classtype:attempted-recon; sid:200002298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinityl.com",nocase; classtype:attempted-recon; sid:200002299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinityme.co",nocase; classtype:attempted-recon; sid:200002300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axieinfinityq.com",nocase; classtype:attempted-recon; sid:200002301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axienfinity.io",nocase; classtype:attempted-recon; sid:200002302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axiesbox-origin-event.my.id",nocase; classtype:attempted-recon; sid:200002303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axiinninfinityp.com",nocase; classtype:attempted-recon; sid:200002304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axjalnfinjty.com",nocase; classtype:attempted-recon; sid:200002305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axlujnflnjty.com",nocase; classtype:attempted-recon; sid:200002306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"axlulnflnlty.com",nocase; classtype:attempted-recon; sid:200002307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aysenurbozdogan.av.tr",nocase; classtype:attempted-recon; sid:200002308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"az-glove.com",nocase; classtype:attempted-recon; sid:200002309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"az98poslas.ga",nocase; classtype:attempted-recon; sid:200002310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azimpiantisrl.com",nocase; classtype:attempted-recon; sid:200002311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azizi-developments.com",nocase; classtype:attempted-recon; sid:200002312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azqpom.hyperphp.com",nocase; classtype:attempted-recon; sid:200002313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azuki-110716005.vercel.app",nocase; classtype:attempted-recon; sid:200002314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azuki-mint-connect.web.app",nocase; classtype:attempted-recon; sid:200002315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azuki.com.co",nocase; classtype:attempted-recon; sid:200002316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b.com.0cdb6084fc320a42a6418192753f5960.laremolonarestaurante.com",nocase; classtype:attempted-recon; sid:200002317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b059c86968a6427389952025bcee9886.svc.dynamics.com",nocase; classtype:attempted-recon; sid:200002318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b2bxenz.com",nocase; classtype:attempted-recon; sid:200002319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b4e921f0.sso-mailsrvr-4344e5teed.pages.dev",nocase; classtype:attempted-recon; sid:200002320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b4kuingchekt.webcindario.com",nocase; classtype:attempted-recon; sid:200002321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"b97bca39.srvr-cloudmail-srvr6754e5rte.pages.dev",nocase; classtype:attempted-recon; sid:200002322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.amcoinmkgw.top",nocase; classtype:attempted-recon; sid:200002323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.avatrademkdw.top",nocase; classtype:attempted-recon; sid:200002324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.b2bxmkgw.top",nocase; classtype:attempted-recon; sid:200002325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bahif9042.xyz",nocase; classtype:attempted-recon; sid:200002326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhifly75390.top",nocase; classtype:attempted-recon; sid:200002327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk36637.xyz",nocase; classtype:attempted-recon; sid:200002328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk40943.xyz",nocase; classtype:attempted-recon; sid:200002329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk41548.xyz",nocase; classtype:attempted-recon; sid:200002330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk42562.xyz",nocase; classtype:attempted-recon; sid:200002331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk47155.xyz",nocase; classtype:attempted-recon; sid:200002332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk48573.xyz",nocase; classtype:attempted-recon; sid:200002333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk63663.xyz",nocase; classtype:attempted-recon; sid:200002334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk64168.xyz",nocase; classtype:attempted-recon; sid:200002335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk67888.xyz",nocase; classtype:attempted-recon; sid:200002336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk69753.xyz",nocase; classtype:attempted-recon; sid:200002337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk73655.xyz",nocase; classtype:attempted-recon; sid:200002338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk74074.xyz",nocase; classtype:attempted-recon; sid:200002339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bhiflyk84276.xyz",nocase; classtype:attempted-recon; sid:200002340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.boursobmyh.top",nocase; classtype:attempted-recon; sid:200002341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.bsxctmkgw.top",nocase; classtype:attempted-recon; sid:200002342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.cbxdwjl.top",nocase; classtype:attempted-recon; sid:200002343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.cbxkmmkgw.top",nocase; classtype:attempted-recon; sid:200002344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.cfhrjfw.top",nocase; classtype:attempted-recon; sid:200002345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.coinsdtwde.top",nocase; classtype:attempted-recon; sid:200002346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.coppermkdw.top",nocase; classtype:attempted-recon; sid:200002347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.cwgtmkgw.top",nocase; classtype:attempted-recon; sid:200002348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.dcgobmyh.top",nocase; classtype:attempted-recon; sid:200002349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.madridfrlh.top",nocase; classtype:attempted-recon; sid:200002350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.qtrademkdw.top",nocase; classtype:attempted-recon; sid:200002351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"backend.transabmyh.top",nocase; classtype:attempted-recon; sid:200002352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bacpayee.contactin.bio",nocase; classtype:attempted-recon; sid:200002353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bacsegurity.webcindario.com",nocase; classtype:attempted-recon; sid:200002354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"badaso-staging.uatech.co.id",nocase; classtype:attempted-recon; sid:200002355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiakla2qxesj4te5clgm44xaoqg4iqoo42w4ihm4yu6iiy5jbhui3e.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiam5bsp2mv367btok6dr2zhnbcwqn45lto62tm32eqm7hlwksp6a4.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200002357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiap7l35l44tbajiyyyhxxj25xp2xm4cnfyyvfz6pai526u6docfzm.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeibwteteysxljum4owlusptthmqqik3h6r3tce7sx23duelarphxgu.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeic47mxxgxrl6qfwl6caxk4m3vaivh4heinjckyt3drhaycejmn3mi.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200002360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeicp3x52jgy3qhsrwaioemeck7vhnryq2i2dgodkakkixuzruo54wa.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeidrh56vohkluey3kp3firhbnvl2vutctx5cgdnjnipjj4sgyfs5vq.ipfs.infura-ipfs.io",nocase; classtype:attempted-recon; sid:200002362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeie3bxfcyzvvftadqheqymuo3vpfadnptlhm63piv4e3f35ffv7akq.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiegrefcxhme2af4mjfdak7md2qsa4bhccwssssa5pgbojacgixpmq.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiexhhfrj2e7perd5epep3mogqk3go2zlalrl6ftuttuxunh7hhlf4.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeifeng7r7uy6pccckoccominercwuaemgejysnlgkizdppyeuywkuq.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200002366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeifhsjjusavaqlm3dbhe2tpkwv4hfynw3hulvrccrl6kyh3tr5qpbi.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeifubevrjvnbqhqvgmvcm3kgwuwmfk6557djsuy524yrr2kdonrbsm.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeigdmxqlghpq5drtil4zy5ydi6kgcx2ect2okv37f76bhw5dmkrh2y.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeigxod2vunid5gmopj2awa4tjhxahammmmya4ldyebibmp3cihnrbm.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200002370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeih4kiqh2vg5tezrl2etecnn65j5jm4lrwswnizojuwxszkbftn2zm.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200002371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeihjapma6kg6iqvpvxz5lojovwgcm6mp5tjqsmigwiymul7bkcse7u.ipfs.dweb.link",nocase; classtype:attempted-recon; sid:200002372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeihpyxm5ffjpi6fvn2hqf7efi2z5r4dkfdgaskm5xohkgkkfgqlbdm.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeihwqgsiib3farmchcqmdvcm5s2sg25jh3rjgaurart6nxcgvhxbau.ipfs.nftstorage.link",nocase; classtype:attempted-recon; sid:200002374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bakery-gmt.org",nocase; classtype:attempted-recon; sid:200002375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bakhai.vn",nocase; classtype:attempted-recon; sid:200002376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baleariclifestyle.be",nocase; classtype:attempted-recon; sid:200002377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"balvegutheahood.tk",nocase; classtype:attempted-recon; sid:200002378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banbifemprsas.com",nocase; classtype:attempted-recon; sid:200002379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banca-electronica1.odoo.com",nocase; classtype:attempted-recon; sid:200002380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancageneral.onlinewebshop.net",nocase; classtype:attempted-recon; sid:200002381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancageneralactualizar.bancageneral.repl.co",nocase; classtype:attempted-recon; sid:200002382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporinterneinterbank.pe-loginn.eu",nocase; classtype:attempted-recon; sid:200002383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporinternet.interbrnpe.com",nocase; classtype:attempted-recon; sid:200002384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.4kwnf9db.xyz",nocase; classtype:attempted-recon; sid:200002385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.aaabestratesmoving.com",nocase; classtype:attempted-recon; sid:200002386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.aaca9cua.xyz",nocase; classtype:attempted-recon; sid:200002387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.agimax.com.pe",nocase; classtype:attempted-recon; sid:200002388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.danielaalmeida.com",nocase; classtype:attempted-recon; sid:200002389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.fannysigns.com",nocase; classtype:attempted-recon; sid:200002390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.libertycanais.com.br",nocase; classtype:attempted-recon; sid:200002391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.mysorabitgroup.com",nocase; classtype:attempted-recon; sid:200002392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.nabi-clothing.com",nocase; classtype:attempted-recon; sid:200002393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.ngaqmdrn.xyz",nocase; classtype:attempted-recon; sid:200002394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.sx7tqcyq.com",nocase; classtype:attempted-recon; sid:200002395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaporlnternetlnterbarnk.ww3lfg5g.xyz",nocase; classtype:attempted-recon; sid:200002396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancaselect0lbklnlcl0sesi0n.com",nocase; classtype:attempted-recon; sid:200002397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancasporinternetslnterbanrkso.com.chinchintirapie.cl",nocase; classtype:attempted-recon; sid:200002398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancofalabella.azurewebsites.net",nocase; classtype:attempted-recon; sid:200002399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancofinandina.zendesk.com",nocase; classtype:attempted-recon; sid:200002400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancomontepiio-pt.com",nocase; classtype:attempted-recon; sid:200002401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banconacional040.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200002402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bancopopular-68v.pages.dev",nocase; classtype:attempted-recon; sid:200002403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banditcoil.augeprint.com",nocase; classtype:attempted-recon; sid:200002404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bankdirect.acquia-demo.com",nocase; classtype:attempted-recon; sid:200002405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bankersnftdrop.com",nocase; classtype:attempted-recon; sid:200002406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"banki0wa.us",nocase; classtype:attempted-recon; sid:200002407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bannerbank.control-inc.com",nocase; classtype:attempted-recon; sid:200002408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baradua.it",nocase; classtype:attempted-recon; sid:200002409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bardgdf.hyperphp.com",nocase; classtype:attempted-recon; sid:200002410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"basketbackup.com",nocase; classtype:attempted-recon; sid:200002411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bavarianhaven1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bavarianhaven1.web.app",nocase; classtype:attempted-recon; sid:200002413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bavarianhaven28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bavarianhaven49.web.app",nocase; classtype:attempted-recon; sid:200002415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bayclive.io",nocase; classtype:attempted-recon; sid:200002416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baytmall.com",nocase; classtype:attempted-recon; sid:200002417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbc-bamenda-girls-boys-e5329.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbexdfvq.cc",nocase; classtype:attempted-recon; sid:200002419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbkano.mystoreden.com",nocase; classtype:attempted-recon; sid:200002420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbmaconline.com",nocase; classtype:attempted-recon; sid:200002421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bbtinternet.github.io",nocase; classtype:attempted-recon; sid:200002422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcdc1cde.sibforms.com",nocase; classtype:attempted-recon; sid:200002423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcnf-services.com",nocase; classtype:attempted-recon; sid:200002424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bcp-marketing.com",nocase; classtype:attempted-recon; sid:200002425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdc-canada.com",nocase; classtype:attempted-recon; sid:200002426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bdcsvr.com",nocase; classtype:attempted-recon; sid:200002427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beacon.marylands.workers.dev",nocase; classtype:attempted-recon; sid:200002428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bearmybrand.com",nocase; classtype:attempted-recon; sid:200002429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beat-style-matrix.de",nocase; classtype:attempted-recon; sid:200002430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beauty-of-islam.com",nocase; classtype:attempted-recon; sid:200002431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"becuorghomeverifypagesxx.dynvpn.de",nocase; classtype:attempted-recon; sid:200002432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beingmelinda.organicmelinda.com",nocase; classtype:attempted-recon; sid:200002433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bekairos.se",nocase; classtype:attempted-recon; sid:200002434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bellsouthonline-verify.yolasite.com",nocase; classtype:attempted-recon; sid:200002435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bellsouthonlineverifyupdate0.yolasite.com",nocase; classtype:attempted-recon; sid:200002436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bellsouthonlineverifyverifyservice.yolasite.com",nocase; classtype:attempted-recon; sid:200002437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bellsouthserviceteam.yolasite.com",nocase; classtype:attempted-recon; sid:200002438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bemsoal-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200002439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bendigobankalert.com",nocase; classtype:attempted-recon; sid:200002440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beneficiotuyapay.hostfree.pw",nocase; classtype:attempted-recon; sid:200002441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"benqi.top",nocase; classtype:attempted-recon; sid:200002442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bericuller.godaddysites.com",nocase; classtype:attempted-recon; sid:200002443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"berksyius.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"berrymotorgroup.com.au",nocase; classtype:attempted-recon; sid:200002445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bestdeckinstallers.dubbedmedia.com",nocase; classtype:attempted-recon; sid:200002446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"besthikinggps.com",nocase; classtype:attempted-recon; sid:200002447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bestofcontractors.com",nocase; classtype:attempted-recon; sid:200002448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"betamedia.com.ng",nocase; classtype:attempted-recon; sid:200002449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"betasegura-viabcp.movil-sms.com",nocase; classtype:attempted-recon; sid:200002450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"betyabuddy.com",nocase; classtype:attempted-recon; sid:200002451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bexwebmailupdate.web.app",nocase; classtype:attempted-recon; sid:200002452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beyondcryptofx.com",nocase; classtype:attempted-recon; sid:200002453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beyondordinarylife.com",nocase; classtype:attempted-recon; sid:200002454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgielectrical.co.uk",nocase; classtype:attempted-recon; sid:200002455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgmieventofficial.xyz",nocase; classtype:attempted-recon; sid:200002456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bharathi1809.github.io",nocase; classtype:attempted-recon; sid:200002457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bhavin0077.github.io",nocase; classtype:attempted-recon; sid:200002458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bibliotecacolegioarabe.cl",nocase; classtype:attempted-recon; sid:200002459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biboxwen.com",nocase; classtype:attempted-recon; sid:200002460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bicicentroslezama.com",nocase; classtype:attempted-recon; sid:200002461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bigshortbets.com",nocase; classtype:attempted-recon; sid:200002462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biiswapp.com",nocase; classtype:attempted-recon; sid:200002463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"billa-ag.at",nocase; classtype:attempted-recon; sid:200002464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"billowing-surf-1772.on.fleek.co",nocase; classtype:attempted-recon; sid:200002465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"billsreadytodaypoweredby.weebly.com",nocase; classtype:attempted-recon; sid:200002466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bimcellkaylaodeme.com",nocase; classtype:attempted-recon; sid:200002467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"binarytrade000.com",nocase; classtype:attempted-recon; sid:200002468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"binjolafilms.com",nocase; classtype:attempted-recon; sid:200002469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biodigy.ro",nocase; classtype:attempted-recon; sid:200002470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bioenergyevitalite.com",nocase; classtype:attempted-recon; sid:200002471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biogbtge.weebly.com",nocase; classtype:attempted-recon; sid:200002472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"birgitkoerner.clickfunnels.com",nocase; classtype:attempted-recon; sid:200002473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitbaink.web.app",nocase; classtype:attempted-recon; sid:200002474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitcoinsucels.com",nocase; classtype:attempted-recon; sid:200002475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitfinexbtck.com",nocase; classtype:attempted-recon; sid:200002476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitfinexday.com",nocase; classtype:attempted-recon; sid:200002477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitfinexhkpd.com",nocase; classtype:attempted-recon; sid:200002478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitflykr.com",nocase; classtype:attempted-recon; sid:200002479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitgert.swap.defi-token.my.id",nocase; classtype:attempted-recon; sid:200002480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bithunnb.web.app",nocase; classtype:attempted-recon; sid:200002481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitit.org",nocase; classtype:attempted-recon; sid:200002482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitkub01.com",nocase; classtype:attempted-recon; sid:200002483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitkubcoin.com",nocase; classtype:attempted-recon; sid:200002484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitkubth.com",nocase; classtype:attempted-recon; sid:200002485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitmart-trust.net",nocase; classtype:attempted-recon; sid:200002486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitpiecrypto.com",nocase; classtype:attempted-recon; sid:200002487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitrack.bin1link.cc",nocase; classtype:attempted-recon; sid:200002488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitswap-pages.com",nocase; classtype:attempted-recon; sid:200002489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitte.modimyk.workers.dev",nocase; classtype:attempted-recon; sid:200002490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitter-term-08e1.masao.workers.dev",nocase; classtype:attempted-recon; sid:200002491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitter24.ru",nocase; classtype:attempted-recon; sid:200002492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biupbfp.com",nocase; classtype:attempted-recon; sid:200002493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"biupeco.com",nocase; classtype:attempted-recon; sid:200002494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bizlinktek.com",nocase; classtype:attempted-recon; sid:200002495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjhjk.efureco.cn",nocase; classtype:attempted-recon; sid:200002496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjihealthcare.com",nocase; classtype:attempted-recon; sid:200002497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjmcellllxxxqqx.com",nocase; classtype:attempted-recon; sid:200002498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjoska-inv.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjoska-inv.web.app",nocase; classtype:attempted-recon; sid:200002500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjoska-invests.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjoska-invests.web.app",nocase; classtype:attempted-recon; sid:200002502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bjshoponline.com",nocase; classtype:attempted-recon; sid:200002503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"black-ofertasmagalu.ntdll.top",nocase; classtype:attempted-recon; sid:200002504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blazinginfosolutions.com",nocase; classtype:attempted-recon; sid:200002505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blerecovery.22web.org",nocase; classtype:attempted-recon; sid:200002506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blizzardlogin-us.com",nocase; classtype:attempted-recon; sid:200002507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bloccooperazionemps.com",nocase; classtype:attempted-recon; sid:200002508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blog.lin.gr.jp",nocase; classtype:attempted-recon; sid:200002509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blowfish-ltd.co.uk",nocase; classtype:attempted-recon; sid:200002510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blswap-exchanqe.com",nocase; classtype:attempted-recon; sid:200002511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blue-tooth-3010.on.fleek.co",nocase; classtype:attempted-recon; sid:200002512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bluelakesgoldandsilver.com",nocase; classtype:attempted-recon; sid:200002513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bluorange.com.au",nocase; classtype:attempted-recon; sid:200002514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blusimba.ooo",nocase; classtype:attempted-recon; sid:200002515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bmo-onlinebanking-6665.weebly.com",nocase; classtype:attempted-recon; sid:200002516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bmo-onlinebanking-reset-rdnfghgfdcf.weebly.com",nocase; classtype:attempted-recon; sid:200002517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bn01928712.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200002518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha10.web.app",nocase; classtype:attempted-recon; sid:200002520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha11.web.app",nocase; classtype:attempted-recon; sid:200002522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha2.web.app",nocase; classtype:attempted-recon; sid:200002524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha3.web.app",nocase; classtype:attempted-recon; sid:200002526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha4.web.app",nocase; classtype:attempted-recon; sid:200002528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha5.web.app",nocase; classtype:attempted-recon; sid:200002530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha6.web.app",nocase; classtype:attempted-recon; sid:200002532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha7.web.app",nocase; classtype:attempted-recon; sid:200002534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha8.web.app",nocase; classtype:attempted-recon; sid:200002536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnamhdiahhdiaondha9.web.app",nocase; classtype:attempted-recon; sid:200002538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnb-pancakeswap.org",nocase; classtype:attempted-recon; sid:200002539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnconacional.odoo.com",nocase; classtype:attempted-recon; sid:200002540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncontacto00982.hostfree.pw",nocase; classtype:attempted-recon; sid:200002541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncre.odoo.com",nocase; classtype:attempted-recon; sid:200002542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bncrfiicr.x10.mx",nocase; classtype:attempted-recon; sid:200002543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnteknolojigiris2022.com",nocase; classtype:attempted-recon; sid:200002544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boatekantokente.com.br",nocase; classtype:attempted-recon; sid:200002545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boatsforsalebyowners.org",nocase; classtype:attempted-recon; sid:200002546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bogdonovlerer.com",nocase; classtype:attempted-recon; sid:200002547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bokgabanesolutions.co.za",nocase; classtype:attempted-recon; sid:200002548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bold-flower-99ee.pontufbksd.workers.dev",nocase; classtype:attempted-recon; sid:200002549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boldd.martobang.workers.dev",nocase; classtype:attempted-recon; sid:200002550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bombcripto-game-cv.blogspot.com",nocase; classtype:attempted-recon; sid:200002551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bombocriptgame.com",nocase; classtype:attempted-recon; sid:200002552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bonne-bouchee.com",nocase; classtype:attempted-recon; sid:200002553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bonolle.com",nocase; classtype:attempted-recon; sid:200002554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bonsaitopics.com",nocase; classtype:attempted-recon; sid:200002555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"booglecloud.web.app",nocase; classtype:attempted-recon; sid:200002556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bookhero.techytypes.net",nocase; classtype:attempted-recon; sid:200002557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"booking-verif.eu",nocase; classtype:attempted-recon; sid:200002558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"booking.payment4853959.eu",nocase; classtype:attempted-recon; sid:200002559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"booksplusbalances.com",nocase; classtype:attempted-recon; sid:200002560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"borderlessminders.com",nocase; classtype:attempted-recon; sid:200002561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boredapeyachtclub.special-mint.com",nocase; classtype:attempted-recon; sid:200002562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"borma.co.id",nocase; classtype:attempted-recon; sid:200002563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"botecodomanolo.blogspot.com",nocase; classtype:attempted-recon; sid:200002564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"boxypty.com",nocase; classtype:attempted-recon; sid:200002565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bp.swany.net",nocase; classtype:attempted-recon; sid:200002566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bpersicura-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200002567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bperwebap-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200002568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bradatualize.com",nocase; classtype:attempted-recon; sid:200002569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bradescoempresas.bankto.me",nocase; classtype:attempted-recon; sid:200002570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brandsoutlet.qa",nocase; classtype:attempted-recon; sid:200002571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brazil.brazilcredits.com",nocase; classtype:attempted-recon; sid:200002572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"breakbiobhud.tk",nocase; classtype:attempted-recon; sid:200002573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brickcerto.com.br",nocase; classtype:attempted-recon; sid:200002574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brighterfuture.dd-dns.de",nocase; classtype:attempted-recon; sid:200002575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brighthavenhospice.com",nocase; classtype:attempted-recon; sid:200002576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broad-bread-4242.on.fleek.co",nocase; classtype:attempted-recon; sid:200002577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broad-poetry-0748.on.fleek.co",nocase; classtype:attempted-recon; sid:200002578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broad-violet-b788.wesmoded.workers.dev",nocase; classtype:attempted-recon; sid:200002579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broad-wave-0335.on.fleek.co",nocase; classtype:attempted-recon; sid:200002580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brohgsebroysh.hostfree.pw",nocase; classtype:attempted-recon; sid:200002581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broke.bibirpergikedanaubuatan.workers.dev",nocase; classtype:attempted-recon; sid:200002582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"broken-waterfall-4461.on.fleek.co",nocase; classtype:attempted-recon; sid:200002583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-forrunning.top",nocase; classtype:attempted-recon; sid:200002584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-move.top",nocase; classtype:attempted-recon; sid:200002585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-ooke.top",nocase; classtype:attempted-recon; sid:200002586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-runfarther.top",nocase; classtype:attempted-recon; sid:200002587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-xsdaodab.top",nocase; classtype:attempted-recon; sid:200002588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks-xsdauofc.top",nocase; classtype:attempted-recon; sid:200002589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooks1914.top",nocase; classtype:attempted-recon; sid:200002590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksair.top",nocase; classtype:attempted-recon; sid:200002591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksale.top",nocase; classtype:attempted-recon; sid:200002592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksdiscount.top",nocase; classtype:attempted-recon; sid:200002593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksfactoryoutlets.com",nocase; classtype:attempted-recon; sid:200002594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksmajor.top",nocase; classtype:attempted-recon; sid:200002595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksnewmethod.top",nocase; classtype:attempted-recon; sid:200002596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksnewsports.top",nocase; classtype:attempted-recon; sid:200002597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksprime.top",nocase; classtype:attempted-recon; sid:200002598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksrunningonline.com",nocase; classtype:attempted-recon; sid:200002599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksrunshoeshopping.top",nocase; classtype:attempted-recon; sid:200002600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brooksshopsft.top",nocase; classtype:attempted-recon; sid:200002601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brookssoft.top",nocase; classtype:attempted-recon; sid:200002602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"brouu0.webcindario.com",nocase; classtype:attempted-recon; sid:200002603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bscpad.com.pe",nocase; classtype:attempted-recon; sid:200002604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bsn-77-187-98.static.siol.net",nocase; classtype:attempted-recon; sid:200002605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bsnshlp.sprtacn.scrthlp.workers.dev",nocase; classtype:attempted-recon; sid:200002606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bsssc.co.uk",nocase; classtype:attempted-recon; sid:200002607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bstarshop.com",nocase; classtype:attempted-recon; sid:200002608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bswap-finance.web.app",nocase; classtype:attempted-recon; sid:200002609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bsx.li",nocase; classtype:attempted-recon; sid:200002610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bsxgju.com",nocase; classtype:attempted-recon; sid:200002611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-101194.weeblysite.com",nocase; classtype:attempted-recon; sid:200002612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-105078.weeblysite.com",nocase; classtype:attempted-recon; sid:200002613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-107853nhffj.weeblysite.com",nocase; classtype:attempted-recon; sid:200002614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-businessbtconnect-voicehomesecure0010100.weebly.com",nocase; classtype:attempted-recon; sid:200002615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-gtgsgyshhcsjs.weeblysite.com",nocase; classtype:attempted-recon; sid:200002616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-internet-521f12.webflow.io",nocase; classtype:attempted-recon; sid:200002617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt-webbbflow.weeblysite.com",nocase; classtype:attempted-recon; sid:200002618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bt.my-style.in",nocase; classtype:attempted-recon; sid:200002619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btbtbt-btbhome-furmoo1oo.weebly.com",nocase; classtype:attempted-recon; sid:200002620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btbusinessbilling.wordpress.com",nocase; classtype:attempted-recon; sid:200002621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btbusinesscommunication.github.io",nocase; classtype:attempted-recon; sid:200002622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btcbixxus.com",nocase; classtype:attempted-recon; sid:200002623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btcexet.com",nocase; classtype:attempted-recon; sid:200002624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btcomyrfbwer6wotrwetf64ot5e34crererke5o47564r534r.weebly.com",nocase; classtype:attempted-recon; sid:200002625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnect-109798.square.site",nocase; classtype:attempted-recon; sid:200002626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btconnectfilesecureinboxbthomegindropboxbackboxpdf-log.yolasite.com",nocase; classtype:attempted-recon; sid:200002627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btghddweeb.weeblysite.com",nocase; classtype:attempted-recon; sid:200002628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btgrg.tynmnuj.cn",nocase; classtype:attempted-recon; sid:200002629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btintelmy-business-106467.square.site",nocase; classtype:attempted-recon; sid:200002630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet-107104.weeblysite.com",nocase; classtype:attempted-recon; sid:200002631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet-109855.square.site",nocase; classtype:attempted-recon; sid:200002632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet.boxmode.io",nocase; classtype:attempted-recon; sid:200002633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet000000008.yolasite.com",nocase; classtype:attempted-recon; sid:200002634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet000000082.yolasite.com",nocase; classtype:attempted-recon; sid:200002635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet0000183.yolasite.com",nocase; classtype:attempted-recon; sid:200002636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet00008970.yolasite.com",nocase; classtype:attempted-recon; sid:200002637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet000096.yolasite.com",nocase; classtype:attempted-recon; sid:200002638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternet0009181.yolasite.com",nocase; classtype:attempted-recon; sid:200002639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternetfgd.weebly.com",nocase; classtype:attempted-recon; sid:200002640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternetghj.weebly.com",nocase; classtype:attempted-recon; sid:200002641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternetjhg.weebly.com",nocase; classtype:attempted-recon; sid:200002642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternetleeds.boxmode.io",nocase; classtype:attempted-recon; sid:200002643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternetrtf.weebly.com",nocase; classtype:attempted-recon; sid:200002644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternetvgf.weebly.com",nocase; classtype:attempted-recon; sid:200002645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btinternetxxx.github.io",nocase; classtype:attempted-recon; sid:200002646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btjhtwert2er723rfc23r5g923sght5o45h34d5234tr32t3.weebly.com",nocase; classtype:attempted-recon; sid:200002647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btlyrgh.mfs.gg",nocase; classtype:attempted-recon; sid:200002648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btmaillofficesserviceses.boxmode.io",nocase; classtype:attempted-recon; sid:200002649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btsei.net",nocase; classtype:attempted-recon; sid:200002650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btserver000.wixsite.com",nocase; classtype:attempted-recon; sid:200002651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bttcommwqrv2rewcdf.wixsite.com",nocase; classtype:attempted-recon; sid:200002652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btwebflowefhehwjw.weeblysite.com",nocase; classtype:attempted-recon; sid:200002653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"btwebmails109144.weeblysite.com",nocase; classtype:attempted-recon; sid:200002654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bubblegooseballers.sol-mints.com",nocase; classtype:attempted-recon; sid:200002655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bujikena.web.app",nocase; classtype:attempted-recon; sid:200002656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bukidnonmockpolls.com",nocase; classtype:attempted-recon; sid:200002657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bund-de.lojaintegrada.com.br",nocase; classtype:attempted-recon; sid:200002658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buralenergiasolar.blogspot.com",nocase; classtype:attempted-recon; sid:200002659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"busanopen.org",nocase; classtype:attempted-recon; sid:200002660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"business-page-appeal-12627-12.web.app",nocase; classtype:attempted-recon; sid:200002661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"businessofficesharepoint.weebly.com",nocase; classtype:attempted-recon; sid:200002662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"businessplanexamples.net",nocase; classtype:attempted-recon; sid:200002663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buybitdollar.com",nocase; classtype:attempted-recon; sid:200002664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buyfbcomments.com",nocase; classtype:attempted-recon; sid:200002665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"buyteches.xyz",nocase; classtype:attempted-recon; sid:200002666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bvjaw.weeblysite.com",nocase; classtype:attempted-recon; sid:200002667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwerc.com",nocase; classtype:attempted-recon; sid:200002668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.20s10r.cn",nocase; classtype:attempted-recon; sid:200002669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.avyeakc.cn",nocase; classtype:attempted-recon; sid:200002670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.bnxfukg.cn",nocase; classtype:attempted-recon; sid:200002671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.bpwwmad.cn",nocase; classtype:attempted-recon; sid:200002672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.bzqpzvg.cn",nocase; classtype:attempted-recon; sid:200002673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.cfdtpzy.cn",nocase; classtype:attempted-recon; sid:200002674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.cicrm.cn",nocase; classtype:attempted-recon; sid:200002675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.cworrgw.cn",nocase; classtype:attempted-recon; sid:200002676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.dgecmdp.cn",nocase; classtype:attempted-recon; sid:200002677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.ecvmdyr.cn",nocase; classtype:attempted-recon; sid:200002678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.eegwabs.cn",nocase; classtype:attempted-recon; sid:200002679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.eepmxxv.cn",nocase; classtype:attempted-recon; sid:200002680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.en434.cn",nocase; classtype:attempted-recon; sid:200002681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.fqpfloh.cn",nocase; classtype:attempted-recon; sid:200002682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.gzshnw.cn",nocase; classtype:attempted-recon; sid:200002683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.iphghte.cn",nocase; classtype:attempted-recon; sid:200002684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.iwrgqmd.cn",nocase; classtype:attempted-recon; sid:200002685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.juxgwgwgxt.cn",nocase; classtype:attempted-recon; sid:200002686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.kavqrly.cn",nocase; classtype:attempted-recon; sid:200002687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.kbnliwp.cn",nocase; classtype:attempted-recon; sid:200002688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.kcmkuwm.cn",nocase; classtype:attempted-recon; sid:200002689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.kydhmah.cn",nocase; classtype:attempted-recon; sid:200002690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.msthols.cn",nocase; classtype:attempted-recon; sid:200002691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.nomvahd.cn",nocase; classtype:attempted-recon; sid:200002692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.nozxsta.cn",nocase; classtype:attempted-recon; sid:200002693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.ovdawnc.cn",nocase; classtype:attempted-recon; sid:200002694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.oxtlyvx.cn",nocase; classtype:attempted-recon; sid:200002695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.ppxspnp.cn",nocase; classtype:attempted-recon; sid:200002696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.qqdhdm.cn",nocase; classtype:attempted-recon; sid:200002697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.qrbhfsl.cn",nocase; classtype:attempted-recon; sid:200002698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.qroiczf.cn",nocase; classtype:attempted-recon; sid:200002699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.rpdyyy.cn",nocase; classtype:attempted-recon; sid:200002700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.sfwsypk.cn",nocase; classtype:attempted-recon; sid:200002701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.skdxupx.cn",nocase; classtype:attempted-recon; sid:200002702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.ujmdzoe.cn",nocase; classtype:attempted-recon; sid:200002703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.xsfqzhq.cn",nocase; classtype:attempted-recon; sid:200002704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.xwsdkw.cn",nocase; classtype:attempted-recon; sid:200002705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.yiilbhx.cn",nocase; classtype:attempted-recon; sid:200002706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.yycaibao.cn",nocase; classtype:attempted-recon; sid:200002707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.zgqkcub.cn",nocase; classtype:attempted-recon; sid:200002708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bwut-au-pay.zuvjisn.cn",nocase; classtype:attempted-recon; sid:200002709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c-on.godaddysites.com",nocase; classtype:attempted-recon; sid:200002710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c.curiousmorty.be",nocase; classtype:attempted-recon; sid:200002711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c.loveawaits.be",nocase; classtype:attempted-recon; sid:200002712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c.mail.com",nocase; classtype:attempted-recon; sid:200002713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c0mf1r240-s4f3tyw3b954.000webhostapp.com",nocase; classtype:attempted-recon; sid:200002714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c0nf1rm4t1on-r3g1m3n-pages.my.id",nocase; classtype:attempted-recon; sid:200002715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c1hbq274.caspio.com",nocase; classtype:attempted-recon; sid:200002716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c2dc5b99.chgmar.pages.dev",nocase; classtype:attempted-recon; sid:200002717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c2dcw069.caspio.com",nocase; classtype:attempted-recon; sid:200002718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c2hch255.caspio.com",nocase; classtype:attempted-recon; sid:200002719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c6ebv708.caspio.com",nocase; classtype:attempted-recon; sid:200002720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c9.cocio15.top",nocase; classtype:attempted-recon; sid:200002721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ca75583.tmweb.ru",nocase; classtype:attempted-recon; sid:200002722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cabanacotulariesului.ro",nocase; classtype:attempted-recon; sid:200002723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cabinetsandstone.herokuapp.com",nocase; classtype:attempted-recon; sid:200002724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cache.nebula.phx3.secureserver.net",nocase; classtype:attempted-recon; sid:200002725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cadastros.swedencentral.cloudapp.azure.com",nocase; classtype:attempted-recon; sid:200002726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caeng.hyperphp.com",nocase; classtype:attempted-recon; sid:200002727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caixainfos.cargo.site",nocase; classtype:attempted-recon; sid:200002728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caixaregularize.blogspot.com",nocase; classtype:attempted-recon; sid:200002729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caixaseguradora.quadientcloud.com",nocase; classtype:attempted-recon; sid:200002730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caixatuiles.com",nocase; classtype:attempted-recon; sid:200002731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cajaarequipa.com",nocase; classtype:attempted-recon; sid:200002732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cajabanrural.negocio.site",nocase; classtype:attempted-recon; sid:200002733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cajaenpiura-pe.com",nocase; classtype:attempted-recon; sid:200002734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cajapiura.pe.falaricco.com.br",nocase; classtype:attempted-recon; sid:200002735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cajapiurape.com",nocase; classtype:attempted-recon; sid:200002736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cajarequipaserv.com",nocase; classtype:attempted-recon; sid:200002737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cajiaopsiquiatra.com",nocase; classtype:attempted-recon; sid:200002738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cakeswap.link",nocase; classtype:attempted-recon; sid:200002739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calgaryren234tlistwca.ru",nocase; classtype:attempted-recon; sid:200002740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calibered-dimension.godaddysites.com",nocase; classtype:attempted-recon; sid:200002741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calstateedu.securevdr.com",nocase; classtype:attempted-recon; sid:200002742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"calstatela.amarjitsangha.com",nocase; classtype:attempted-recon; sid:200002743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"canadavisitisrael.com",nocase; classtype:attempted-recon; sid:200002744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cancel-trusted.com",nocase; classtype:attempted-recon; sid:200002745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cancelyourtrade.link",nocase; classtype:attempted-recon; sid:200002746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"capacitacionserprof.cl",nocase; classtype:attempted-recon; sid:200002747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"capschoul.lu",nocase; classtype:attempted-recon; sid:200002748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caracasmateriais.blogspot.com",nocase; classtype:attempted-recon; sid:200002749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"card-cancellation.com",nocase; classtype:attempted-recon; sid:200002750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"card518.xyz",nocase; classtype:attempted-recon; sid:200002751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"careanimalhealth.co.zw",nocase; classtype:attempted-recon; sid:200002752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carittas.ch",nocase; classtype:attempted-recon; sid:200002753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carlos.hostfree.pw",nocase; classtype:attempted-recon; sid:200002754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carpediemxp.com",nocase; classtype:attempted-recon; sid:200002755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cas-polygon.blogspot.com",nocase; classtype:attempted-recon; sid:200002756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"casadoborracheiroxx.blogspot.com",nocase; classtype:attempted-recon; sid:200002757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"casanaturalle.com",nocase; classtype:attempted-recon; sid:200002758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caseid4785055283customerservice.blogspot.com",nocase; classtype:attempted-recon; sid:200002759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cashlnterbaranksocie.will-o-wisp-games.com",nocase; classtype:attempted-recon; sid:200002760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catanocorp.com",nocase; classtype:attempted-recon; sid:200002761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catedu.gcosoftware.vn",nocase; classtype:attempted-recon; sid:200002762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cateringfoodanddrinksupplies777.business.site",nocase; classtype:attempted-recon; sid:200002763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catranalujour.ml",nocase; classtype:attempted-recon; sid:200002764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"catus.cat",nocase; classtype:attempted-recon; sid:200002765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cawiji.com",nocase; classtype:attempted-recon; sid:200002766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"caycos.beispielseite-wmka.de",nocase; classtype:attempted-recon; sid:200002767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cbhou91px.fiswebdv.net",nocase; classtype:attempted-recon; sid:200002768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cbskateshoop.blogspot.com",nocase; classtype:attempted-recon; sid:200002769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cbxupbx.com",nocase; classtype:attempted-recon; sid:200002770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ccitaperu.com",nocase; classtype:attempted-recon; sid:200002771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ccjrlaw.com",nocase; classtype:attempted-recon; sid:200002772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cd-progect.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cd-progect.web.app",nocase; classtype:attempted-recon; sid:200002774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cd-progets.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cd-progets.web.app",nocase; classtype:attempted-recon; sid:200002776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cd20878.tmweb.ru",nocase; classtype:attempted-recon; sid:200002777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cdn-32965.airbnb-onelogin.com",nocase; classtype:attempted-recon; sid:200002778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cebfintech.com",nocase; classtype:attempted-recon; sid:200002779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cef8vwt7y9h.typeform.com",nocase; classtype:attempted-recon; sid:200002780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"centoplasre.godaddysites.com",nocase; classtype:attempted-recon; sid:200002781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"certificadosgobmx.com",nocase; classtype:attempted-recon; sid:200002782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ceskaposta-q.cz",nocase; classtype:attempted-recon; sid:200002783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cetelemmobileconfirmai.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cetelemmobileconfirmai.web.app",nocase; classtype:attempted-recon; sid:200002785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cetoghoripidd.gq",nocase; classtype:attempted-recon; sid:200002786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cf5233ed.sibforms.com",nocase; classtype:attempted-recon; sid:200002787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cflaxii.com",nocase; classtype:attempted-recon; sid:200002788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cftechno.in",nocase; classtype:attempted-recon; sid:200002789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cgbirhiokq.duckdns.org",nocase; classtype:attempted-recon; sid:200002790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ch-328328328832.blogspot.com",nocase; classtype:attempted-recon; sid:200002791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ch-483828832.blogspot.com",nocase; classtype:attempted-recon; sid:200002792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chain-node.org",nocase; classtype:attempted-recon; sid:200002793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chainofchanges.com",nocase; classtype:attempted-recon; sid:200002794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chainswap-ecomi.com",nocase; classtype:attempted-recon; sid:200002795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chalkerabeat.web.app",nocase; classtype:attempted-recon; sid:200002796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"challengepkd.com",nocase; classtype:attempted-recon; sid:200002797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chamber.lankapanel.net",nocase; classtype:attempted-recon; sid:200002798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chancey.byethost31.com",nocase; classtype:attempted-recon; sid:200002799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"changewill.namenewamazoncard.top",nocase; classtype:attempted-recon; sid:200002800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"charlottejunkobroker.online",nocase; classtype:attempted-recon; sid:200002801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"charlottev.temp.swtest.ru",nocase; classtype:attempted-recon; sid:200002802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chase-help-support-locked.blogspot.com",nocase; classtype:attempted-recon; sid:200002803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chase-onlinehelp.blogspot.com",nocase; classtype:attempted-recon; sid:200002804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chasebank.dressica.pk",nocase; classtype:attempted-recon; sid:200002805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chasecertificatesusigon.bill48408mailfonycom.workers.dev",nocase; classtype:attempted-recon; sid:200002806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chavis-626df.web.app",nocase; classtype:attempted-recon; sid:200002807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chcebmraton.com",nocase; classtype:attempted-recon; sid:200002808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"check-add-request.com",nocase; classtype:attempted-recon; sid:200002809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"check-status-31f89.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"check-status-31f89.web.app",nocase; classtype:attempted-recon; sid:200002811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkmynewphotos.com",nocase; classtype:attempted-recon; sid:200002812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-10000087699783.tk",nocase; classtype:attempted-recon; sid:200002813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000025977541.tk",nocase; classtype:attempted-recon; sid:200002814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000025977542.tk",nocase; classtype:attempted-recon; sid:200002815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000025977543.tk",nocase; classtype:attempted-recon; sid:200002816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000025977544.tk",nocase; classtype:attempted-recon; sid:200002817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000025977545.tk",nocase; classtype:attempted-recon; sid:200002818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000025977546.tk",nocase; classtype:attempted-recon; sid:200002819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000025977547.tk",nocase; classtype:attempted-recon; sid:200002820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000025977548.tk",nocase; classtype:attempted-recon; sid:200002821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000025977549.tk",nocase; classtype:attempted-recon; sid:200002822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000025977550.tk",nocase; classtype:attempted-recon; sid:200002823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000027488593525.tk",nocase; classtype:attempted-recon; sid:200002824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000027488593526.tk",nocase; classtype:attempted-recon; sid:200002825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-1000027488593528.tk",nocase; classtype:attempted-recon; sid:200002826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-20000058795344.tk",nocase; classtype:attempted-recon; sid:200002827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checkpoint-facebook-100002457899831.tk",nocase; classtype:attempted-recon; sid:200002828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail22.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail25.web.app",nocase; classtype:attempted-recon; sid:200002832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail26.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail26.web.app",nocase; classtype:attempted-recon; sid:200002834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail27.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail27.web.app",nocase; classtype:attempted-recon; sid:200002836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail28.web.app",nocase; classtype:attempted-recon; sid:200002838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail29.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail29.web.app",nocase; classtype:attempted-recon; sid:200002840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail30.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail30.web.app",nocase; classtype:attempted-recon; sid:200002842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail31.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail31.web.app",nocase; classtype:attempted-recon; sid:200002844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail32.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail32.web.app",nocase; classtype:attempted-recon; sid:200002846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail33.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail33.web.app",nocase; classtype:attempted-recon; sid:200002848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail34.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail34.web.app",nocase; classtype:attempted-recon; sid:200002850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail35.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail35.web.app",nocase; classtype:attempted-recon; sid:200002852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail36.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"checksweetmail36.web.app",nocase; classtype:attempted-recon; sid:200002854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chefshailendra.in",nocase; classtype:attempted-recon; sid:200002855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chekpoinacn.tk",nocase; classtype:attempted-recon; sid:200002856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chest-granny-exhibition-hygiene.trycloudflare.com",nocase; classtype:attempted-recon; sid:200002857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chiddingstonenursery.co.uk",nocase; classtype:attempted-recon; sid:200002858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chikkuthomas.github.io",nocase; classtype:attempted-recon; sid:200002859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"china-gear.org",nocase; classtype:attempted-recon; sid:200002860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chinmayavidyalayarspuram.com",nocase; classtype:attempted-recon; sid:200002861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chiragrajoria.github.io",nocase; classtype:attempted-recon; sid:200002862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chois.jp",nocase; classtype:attempted-recon; sid:200002863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chpostswisssuivisflorieaeco-b37282.ingress-erytho.ewp.live",nocase; classtype:attempted-recon; sid:200002864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chutlincrapo.web.app",nocase; classtype:attempted-recon; sid:200002865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ci08806.tmweb.ru",nocase; classtype:attempted-recon; sid:200002866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cicapay.com",nocase; classtype:attempted-recon; sid:200002867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cicki-info.xyz",nocase; classtype:attempted-recon; sid:200002868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cimeronline.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cimeronline.web.app",nocase; classtype:attempted-recon; sid:200002870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cimeronlineiadesistemi.web.app",nocase; classtype:attempted-recon; sid:200002871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cintasejatidrink.com",nocase; classtype:attempted-recon; sid:200002872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ciospydtalesssoundte.tk",nocase; classtype:attempted-recon; sid:200002873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cirrilla-stripe-form.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cirrilla-stripe-form.web.app",nocase; classtype:attempted-recon; sid:200002875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cisteodpady.cz",nocase; classtype:attempted-recon; sid:200002876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"citizensbkupdate.servebeer.com",nocase; classtype:attempted-recon; sid:200002877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"citizensecure0.herokuapp.com",nocase; classtype:attempted-recon; sid:200002878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"citsa.co.za",nocase; classtype:attempted-recon; sid:200002879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"city-index.co",nocase; classtype:attempted-recon; sid:200002880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"city-of-jazz.de",nocase; classtype:attempted-recon; sid:200002881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cityastro.com",nocase; classtype:attempted-recon; sid:200002882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claro-link.brsafe.com.br",nocase; classtype:attempted-recon; sid:200002883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"classiceyewear.in",nocase; classtype:attempted-recon; sid:200002884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"claus.bz",nocase; classtype:attempted-recon; sid:200002885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cleargalaxy.net",nocase; classtype:attempted-recon; sid:200002886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clebersupports.com",nocase; classtype:attempted-recon; sid:200002887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clever-bohr.91-218-65-223.plesk.page",nocase; classtype:attempted-recon; sid:200002888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clic.ae",nocase; classtype:attempted-recon; sid:200002889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"client.fsdsg.cc",nocase; classtype:attempted-recon; sid:200002890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clienteperfil.bradapp.site",nocase; classtype:attempted-recon; sid:200002891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clients.devtux.com",nocase; classtype:attempted-recon; sid:200002892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clientverif-boursorama.fr",nocase; classtype:attempted-recon; sid:200002893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clik.rip",nocase; classtype:attempted-recon; sid:200002894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"climatefinance.go.ug",nocase; classtype:attempted-recon; sid:200002895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clinicarubedo.com.br",nocase; classtype:attempted-recon; sid:200002896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clinicasagradafamiliahn.com",nocase; classtype:attempted-recon; sid:200002897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clockurl.com",nocase; classtype:attempted-recon; sid:200002898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clone-7473c.web.app",nocase; classtype:attempted-recon; sid:200002899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"closingdocs9480.myportfolio.com",nocase; classtype:attempted-recon; sid:200002900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud-storage.files-recruitments.workers.dev",nocase; classtype:attempted-recon; sid:200002901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud.onlineapp.rest",nocase; classtype:attempted-recon; sid:200002902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud102.hostgator.com",nocase; classtype:attempted-recon; sid:200002903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clouddoc-authorize.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloudi.sitea.workers.dev",nocase; classtype:attempted-recon; sid:200002905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloudshare.at",nocase; classtype:attempted-recon; sid:200002906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clt1419287.bmetrack.com",nocase; classtype:attempted-recon; sid:200002907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clt1432536.bmetrack.com",nocase; classtype:attempted-recon; sid:200002908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clubeamigosdopedrosegundo.com.br",nocase; classtype:attempted-recon; sid:200002909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cn61015.tmweb.ru",nocase; classtype:attempted-recon; sid:200002910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cn83521.tmweb.ru",nocase; classtype:attempted-recon; sid:200002911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cner283829.odoo.com",nocase; classtype:attempted-recon; sid:200002912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cnfrmacn.hprusak.workers.dev",nocase; classtype:attempted-recon; sid:200002913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cnn-cameroon-trending-eeb01.web.app",nocase; classtype:attempted-recon; sid:200002914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cny-shopee.blogspot.com",nocase; classtype:attempted-recon; sid:200002915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"co-d.jp",nocase; classtype:attempted-recon; sid:200002916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coaching-bien-etre.com",nocase; classtype:attempted-recon; sid:200002917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"code-douanes.chouaibi-developer.tn",nocase; classtype:attempted-recon; sid:200002918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"codepasta.app",nocase; classtype:attempted-recon; sid:200002919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coin98n.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinbazer.com",nocase; classtype:attempted-recon; sid:200002921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coindel-btc.com",nocase; classtype:attempted-recon; sid:200002922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coineggnom.com",nocase; classtype:attempted-recon; sid:200002923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinneptune.com",nocase; classtype:attempted-recon; sid:200002924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinpayu-adres.blogspot.com",nocase; classtype:attempted-recon; sid:200002925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinssolutionrectification.com",nocase; classtype:attempted-recon; sid:200002926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinsxek.com",nocase; classtype:attempted-recon; sid:200002927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"colcentralnew.procesardatos.com",nocase; classtype:attempted-recon; sid:200002928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cold-frog-0180.on.fleek.co",nocase; classtype:attempted-recon; sid:200002929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"collablamd.cc",nocase; classtype:attempted-recon; sid:200002930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"college2lifecoaching.com",nocase; classtype:attempted-recon; sid:200002931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"colleges.su.edu.krd",nocase; classtype:attempted-recon; sid:200002932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coloursofclimbing.sk",nocase; classtype:attempted-recon; sid:200002933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"comfuyer.com",nocase; classtype:attempted-recon; sid:200002934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"comm-netprofile.com",nocase; classtype:attempted-recon; sid:200002935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"commeres.cluster007.ovh.net",nocase; classtype:attempted-recon; sid:200002936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"commerzbank-phototan76z2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200002937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"commerzbank-phototan76z2.web.app",nocase; classtype:attempted-recon; sid:200002938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"communauteaserm.com",nocase; classtype:attempted-recon; sid:200002939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"communitystandardtripages.co.vu",nocase; classtype:attempted-recon; sid:200002940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"complementosicop.com",nocase; classtype:attempted-recon; sid:200002941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"completecustomcleaningonline.com",nocase; classtype:attempted-recon; sid:200002942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"comprind.com.br",nocase; classtype:attempted-recon; sid:200002943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"comunidademasculina.com",nocase; classtype:attempted-recon; sid:200002944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"concourstirageausort-leboncoiin.gq",nocase; classtype:attempted-recon; sid:200002945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"concretepolishingauckland.buystorhtokens.com",nocase; classtype:attempted-recon; sid:200002946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"condirmngaccountcomiunty.co.vu",nocase; classtype:attempted-recon; sid:200002947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"conf.chuuu.workers.dev",nocase; classtype:attempted-recon; sid:200002948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirm-security-logon.com",nocase; classtype:attempted-recon; sid:200002949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmaciondecuenta-c30e.czemarkojo.workers.dev",nocase; classtype:attempted-recon; sid:200002950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmationsdesrecharges.weebly.com",nocase; classtype:attempted-recon; sid:200002951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmavion2231.webcindario.com",nocase; classtype:attempted-recon; sid:200002952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmfalabeco.x10.mx",nocase; classtype:attempted-recon; sid:200002953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmongpagesafeteety.co.vu",nocase; classtype:attempted-recon; sid:200002954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"conlineoperatransgobpe.com",nocase; classtype:attempted-recon; sid:200002955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect-au-login.updateajp.top",nocase; classtype:attempted-recon; sid:200002956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect-au-login.updateijp.club",nocase; classtype:attempted-recon; sid:200002957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect-verify.net",nocase; classtype:attempted-recon; sid:200002958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect-wallet-app.com",nocase; classtype:attempted-recon; sid:200002959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connectiwallets.com",nocase; classtype:attempted-recon; sid:200002960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connectroyale.net",nocase; classtype:attempted-recon; sid:200002961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connectthewallet.com",nocase; classtype:attempted-recon; sid:200002962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consecuntaprivat.portalaprender.com.br",nocase; classtype:attempted-recon; sid:200002963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consent.clarosgvas.mobicare.com.br",nocase; classtype:attempted-recon; sid:200002964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"considerpublisher.com",nocase; classtype:attempted-recon; sid:200002965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consigueturegalo.club",nocase; classtype:attempted-recon; sid:200002966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consultasinformaciones.live",nocase; classtype:attempted-recon; sid:200002967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consultehiper.net",nocase; classtype:attempted-recon; sid:200002968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"consultoriasper.retirodeconsultaestadopreniuns.com",nocase; classtype:attempted-recon; sid:200002969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"conswise.com",nocase; classtype:attempted-recon; sid:200002970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contabilidaderabello.com.br",nocase; classtype:attempted-recon; sid:200002971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contact-jp.abrdn-plc.cn",nocase; classtype:attempted-recon; sid:200002972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contact-jp.cggrixc.cn",nocase; classtype:attempted-recon; sid:200002973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contact-jp.jhirgf12.cn",nocase; classtype:attempted-recon; sid:200002974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contact-noreply003-my-cheetah-website-1.cheetah.builderall.com",nocase; classtype:attempted-recon; sid:200002975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"contadigital.faz.vc",nocase; classtype:attempted-recon; sid:200002976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"continentalproducts.com",nocase; classtype:attempted-recon; sid:200002977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"convalidanumero.com",nocase; classtype:attempted-recon; sid:200002978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cool-hat-0753.on.fleek.co",nocase; classtype:attempted-recon; sid:200002979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cool-moon-9292.on.fleek.co",nocase; classtype:attempted-recon; sid:200002980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coptic.justpithy.com",nocase; classtype:attempted-recon; sid:200002981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coradecora.com.br",nocase; classtype:attempted-recon; sid:200002982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cordertradellc.com",nocase; classtype:attempted-recon; sid:200002983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"core.pdf-asset.workers.dev",nocase; classtype:attempted-recon; sid:200002984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coreinfo.work",nocase; classtype:attempted-recon; sid:200002985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cornwallsurveyors.co.uk",nocase; classtype:attempted-recon; sid:200002986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cosgtradeex.com",nocase; classtype:attempted-recon; sid:200002987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"costasbbq.com",nocase; classtype:attempted-recon; sid:200002988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cottonwooddentalg.nimbusweb.me",nocase; classtype:attempted-recon; sid:200002989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cottonwoodpeds.com",nocase; classtype:attempted-recon; sid:200002990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"counseall.webcindario.com",nocase; classtype:attempted-recon; sid:200002991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"courrier-orange.mailerpage.io",nocase; classtype:attempted-recon; sid:200002992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"courtcase.co.in",nocase; classtype:attempted-recon; sid:200002993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cozy-tartufo-92b900.netlify.app",nocase; classtype:attempted-recon; sid:200002994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cp.digitalprocurements.co.uk",nocase; classtype:attempted-recon; sid:200002995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cpanel10wh.bkk1.cloud.z.com",nocase; classtype:attempted-recon; sid:200002996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cpcalendars.bzonedomains.co.za",nocase; classtype:attempted-recon; sid:200002997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cplaylogistics.weebly.com",nocase; classtype:attempted-recon; sid:200002998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cqmuco.myportfolio.com",nocase; classtype:attempted-recon; sid:200002999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cqmuco4afa.myportfolio.com",nocase; classtype:attempted-recon; sid:200003000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crazy-taxi.de",nocase; classtype:attempted-recon; sid:200003001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"create-appeal-75441.herokuapp.com",nocase; classtype:attempted-recon; sid:200003002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creatindesigns.com",nocase; classtype:attempted-recon; sid:200003003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditagricole-sudrhonealpes.blogspot.ba",nocase; classtype:attempted-recon; sid:200003004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditagricole-sudrhonealpes.blogspot.com",nocase; classtype:attempted-recon; sid:200003005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditagricole-sudrhonealpes.blogspot.ro",nocase; classtype:attempted-recon; sid:200003006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditiperhabbogratissicuro100.blogspot.it",nocase; classtype:attempted-recon; sid:200003007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditsuisse.bluproducts.com.py",nocase; classtype:attempted-recon; sid:200003008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crefirmantionsapgesandcommunity.co.vu",nocase; classtype:attempted-recon; sid:200003009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cricutcomregister.com",nocase; classtype:attempted-recon; sid:200003010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"criticalcarevizag.com",nocase; classtype:attempted-recon; sid:200003011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crm.epochfinancialus.com",nocase; classtype:attempted-recon; sid:200003012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cromexa.com",nocase; classtype:attempted-recon; sid:200003013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crosscountry.com.tr",nocase; classtype:attempted-recon; sid:200003014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crossfryerross.com",nocase; classtype:attempted-recon; sid:200003015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crossoverbrazil.com",nocase; classtype:attempted-recon; sid:200003016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crossoveritsolutions.com",nocase; classtype:attempted-recon; sid:200003017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptdbs.net",nocase; classtype:attempted-recon; sid:200003018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptoassetrecovery.com",nocase; classtype:attempted-recon; sid:200003019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptocar.biz",nocase; classtype:attempted-recon; sid:200003020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptocarsme.com",nocase; classtype:attempted-recon; sid:200003021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptocarspro.com",nocase; classtype:attempted-recon; sid:200003022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptonvest.com",nocase; classtype:attempted-recon; sid:200003023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptopanel.net",nocase; classtype:attempted-recon; sid:200003024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cryptoplanes.top",nocase; classtype:attempted-recon; sid:200003025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"crystalbluegroup.com.au",nocase; classtype:attempted-recon; sid:200003026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cs-si.ru",nocase; classtype:attempted-recon; sid:200003027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"csgo7.net",nocase; classtype:attempted-recon; sid:200003028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"csibone.com",nocase; classtype:attempted-recon; sid:200003029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cu42583.tmweb.ru",nocase; classtype:attempted-recon; sid:200003030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cubbychase5k10k.org",nocase; classtype:attempted-recon; sid:200003031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cuentasfreefire.club",nocase; classtype:attempted-recon; sid:200003032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curaquanticatqc.com.br",nocase; classtype:attempted-recon; sid:200003033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curiocard.co.uk",nocase; classtype:attempted-recon; sid:200003034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curly-field-bd79.wareareto.workers.dev",nocase; classtype:attempted-recon; sid:200003035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curly-wave-9189.on.fleek.co",nocase; classtype:attempted-recon; sid:200003036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently-mtlatt.weebly.com",nocase; classtype:attempted-recon; sid:200003037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"currently-yahoo-login-att-mail.weebly.com",nocase; classtype:attempted-recon; sid:200003038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curtiskennedy.miloyu.com",nocase; classtype:attempted-recon; sid:200003039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curtismscaparrotti03.mfs.gg",nocase; classtype:attempted-recon; sid:200003040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"customer-p.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"customer-p.web.app",nocase; classtype:attempted-recon; sid:200003042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cuttermachine.xyz",nocase; classtype:attempted-recon; sid:200003043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cvdxz.jbgwfli.cn",nocase; classtype:attempted-recon; sid:200003044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cveoy-kaaaa-aaaad-qcucq-cai.raw.ic0.app",nocase; classtype:attempted-recon; sid:200003045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cvsr1.hyperphp.com",nocase; classtype:attempted-recon; sid:200003046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cvxceude.web.app",nocase; classtype:attempted-recon; sid:200003047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cw80143.tmweb.ru",nocase; classtype:attempted-recon; sid:200003048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cwar9.enviodecontrato.digital",nocase; classtype:attempted-recon; sid:200003049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cwbwka.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cwbwka.web.app",nocase; classtype:attempted-recon; sid:200003051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cwtx2-syaaa-aaaad-qct7q-cai.raw.ic0.app",nocase; classtype:attempted-recon; sid:200003052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cybper.eu",nocase; classtype:attempted-recon; sid:200003053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"czvon.4fan.cz",nocase; classtype:attempted-recon; sid:200003054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d-pdf6785.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.app01988.xyz",nocase; classtype:attempted-recon; sid:200003056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.app32150.xyz",nocase; classtype:attempted-recon; sid:200003057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.app95789.top",nocase; classtype:attempted-recon; sid:200003058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.app99376.top",nocase; classtype:attempted-recon; sid:200003059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.edgecryptobf.xyz",nocase; classtype:attempted-recon; sid:200003060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.jxted.top",nocase; classtype:attempted-recon; sid:200003061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d.oftde.top",nocase; classtype:attempted-recon; sid:200003062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d2aae6a6.srvr-cloudmail-srvr675eu6r.pages.dev",nocase; classtype:attempted-recon; sid:200003063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"d49288-3823.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"da884582e99578833.temporary.link",nocase; classtype:attempted-recon; sid:200003065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dacetnroj-gemes.com",nocase; classtype:attempted-recon; sid:200003066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daiichi-gakki.co.jp",nocase; classtype:attempted-recon; sid:200003067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dailymetro.in",nocase; classtype:attempted-recon; sid:200003068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dainikjeevan.com",nocase; classtype:attempted-recon; sid:200003069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"damoxkycashbill.wixsite.com",nocase; classtype:attempted-recon; sid:200003070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"damp-f43e.recovery-page-secur.workers.dev",nocase; classtype:attempted-recon; sid:200003071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dangol-v2.web.app",nocase; classtype:attempted-recon; sid:200003072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapaiduo.com",nocase; classtype:attempted-recon; sid:200003073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapp-eth.center",nocase; classtype:attempted-recon; sid:200003074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapp-eth.tips",nocase; classtype:attempted-recon; sid:200003075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapp-pool.live",nocase; classtype:attempted-recon; sid:200003076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapp.activationaccess.com",nocase; classtype:attempted-recon; sid:200003077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapp.busta.gg",nocase; classtype:attempted-recon; sid:200003078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapp.swaplibra.com",nocase; classtype:attempted-recon; sid:200003079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappai.net",nocase; classtype:attempted-recon; sid:200003080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappauto.top",nocase; classtype:attempted-recon; sid:200003081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappbuilder.org",nocase; classtype:attempted-recon; sid:200003082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapplink.tech",nocase; classtype:attempted-recon; sid:200003083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappnetsync.com",nocase; classtype:attempted-recon; sid:200003084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappnodeconnect.net",nocase; classtype:attempted-recon; sid:200003085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapps-accesstool.com",nocase; classtype:attempted-recon; sid:200003086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapps-live.web.app",nocase; classtype:attempted-recon; sid:200003087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapps-rectificate.com.co",nocase; classtype:attempted-recon; sid:200003088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapps-rewards.com",nocase; classtype:attempted-recon; sid:200003089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappschainencrypt.co",nocase; classtype:attempted-recon; sid:200003090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappssynch.win",nocase; classtype:attempted-recon; sid:200003091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappstool-sync.com",nocase; classtype:attempted-recon; sid:200003092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappsync.nl",nocase; classtype:attempted-recon; sid:200003093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappwallet-connect.com",nocase; classtype:attempted-recon; sid:200003094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappwalletconnect.000webhostapp.com",nocase; classtype:attempted-recon; sid:200003095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dappwalletsyncs.com",nocase; classtype:attempted-recon; sid:200003096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dar.kupabaruak.workers.dev",nocase; classtype:attempted-recon; sid:200003097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"darlingdate.live",nocase; classtype:attempted-recon; sid:200003098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"darmanpluss.ir",nocase; classtype:attempted-recon; sid:200003099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dasobam.com.ng",nocase; classtype:attempted-recon; sid:200003100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daumq.weebly.com",nocase; classtype:attempted-recon; sid:200003101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davidckane.com",nocase; classtype:attempted-recon; sid:200003102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dawn-river-3b54.marylands.workers.dev",nocase; classtype:attempted-recon; sid:200003103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dawnndusk.in",nocase; classtype:attempted-recon; sid:200003104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dawno.ciwumugiasda.workers.dev",nocase; classtype:attempted-recon; sid:200003105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daycoval.contrato.srv.br",nocase; classtype:attempted-recon; sid:200003106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"daycoval.facildepagar.com.br",nocase; classtype:attempted-recon; sid:200003107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbs.com-ibank.bz",nocase; classtype:attempted-recon; sid:200003108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dbtech-ies.com",nocase; classtype:attempted-recon; sid:200003109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dc98f1bb.sibforms.com",nocase; classtype:attempted-recon; sid:200003110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dd90001.github.io",nocase; classtype:attempted-recon; sid:200003111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ddddduuuiee.weeblysite.com",nocase; classtype:attempted-recon; sid:200003112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"de22c9kukppr.clickfunnels.com",nocase; classtype:attempted-recon; sid:200003113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deborahholland.net",nocase; classtype:attempted-recon; sid:200003114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"decenlretends.com",nocase; classtype:attempted-recon; sid:200003115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"decentrskal-games-on.com",nocase; classtype:attempted-recon; sid:200003116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"decisionslc.com",nocase; classtype:attempted-recon; sid:200003117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deconfort.ro",nocase; classtype:attempted-recon; sid:200003118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"decrocheur.com",nocase; classtype:attempted-recon; sid:200003119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ded4950.inmotionhosting.com",nocase; classtype:attempted-recon; sid:200003120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ded5896.inmotionhosting.com",nocase; classtype:attempted-recon; sid:200003121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defgfdh.svxazzz.cn",nocase; classtype:attempted-recon; sid:200003122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-aavev3.cloud",nocase; classtype:attempted-recon; sid:200003123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-aavev3.club",nocase; classtype:attempted-recon; sid:200003124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-aavev3.info",nocase; classtype:attempted-recon; sid:200003125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-ai.me",nocase; classtype:attempted-recon; sid:200003126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-ai.one",nocase; classtype:attempted-recon; sid:200003127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defi-go.me",nocase; classtype:attempted-recon; sid:200003128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defiblockchain-node.com",nocase; classtype:attempted-recon; sid:200003129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defikiinqdomsi.com",nocase; classtype:attempted-recon; sid:200003130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defilo.io",nocase; classtype:attempted-recon; sid:200003131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defioffchain-rects.com",nocase; classtype:attempted-recon; sid:200003132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defirader.xyz",nocase; classtype:attempted-recon; sid:200003133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"defispot.live",nocase; classtype:attempted-recon; sid:200003134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"degfg.prdpmsh.cn",nocase; classtype:attempted-recon; sid:200003135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deintiershop.com",nocase; classtype:attempted-recon; sid:200003136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dejpaad.com",nocase; classtype:attempted-recon; sid:200003137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dekifingsdoms.com",nocase; classtype:attempted-recon; sid:200003138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delezhen.mashalezhen.com",nocase; classtype:attempted-recon; sid:200003139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delhiescort69.com",nocase; classtype:attempted-recon; sid:200003140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delicate-bonus-7166.on.fleek.co",nocase; classtype:attempted-recon; sid:200003141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"delicate-bush-0904.rcvrypahsajk.workers.dev",nocase; classtype:attempted-recon; sid:200003142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deliverrapid.net",nocase; classtype:attempted-recon; sid:200003143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demallplot-tra.web.app",nocase; classtype:attempted-recon; sid:200003144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demarch22.ml",nocase; classtype:attempted-recon; sid:200003145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.360degreeinfo.net",nocase; classtype:attempted-recon; sid:200003146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.bradescocontrol.vertitecnologia.com.br",nocase; classtype:attempted-recon; sid:200003147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.lankapanel.net",nocase; classtype:attempted-recon; sid:200003148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.webnappmaker.in",nocase; classtype:attempted-recon; sid:200003149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo2.cloudwp.dev",nocase; classtype:attempted-recon; sid:200003150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demovp.cruisesmekongriver.net",nocase; classtype:attempted-recon; sid:200003151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dengui.abcrocknroll.fr",nocase; classtype:attempted-recon; sid:200003152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga1.web.app",nocase; classtype:attempted-recon; sid:200003154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga10.web.app",nocase; classtype:attempted-recon; sid:200003156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga11.web.app",nocase; classtype:attempted-recon; sid:200003158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga12.web.app",nocase; classtype:attempted-recon; sid:200003160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga2.web.app",nocase; classtype:attempted-recon; sid:200003162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga3.web.app",nocase; classtype:attempted-recon; sid:200003164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga4.web.app",nocase; classtype:attempted-recon; sid:200003166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga6.web.app",nocase; classtype:attempted-recon; sid:200003168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga8.web.app",nocase; classtype:attempted-recon; sid:200003170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"denkairhabfga9.web.app",nocase; classtype:attempted-recon; sid:200003172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"depositedaccountingresoursedept.s3.us-west-1.amazonaws.com",nocase; classtype:attempted-recon; sid:200003173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deqaiuf.top",nocase; classtype:attempted-recon; sid:200003174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desarrolloturisticopartidordelsol.com",nocase; classtype:attempted-recon; sid:200003175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desejoourocard.com.br",nocase; classtype:attempted-recon; sid:200003176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desk-id-72491.herokuapp.com",nocase; classtype:attempted-recon; sid:200003177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desplugado.com",nocase; classtype:attempted-recon; sid:200003178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"destorelife.com",nocase; classtype:attempted-recon; sid:200003179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"detectioncenter-meta.com",nocase; classtype:attempted-recon; sid:200003180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deutcher.easy.co",nocase; classtype:attempted-recon; sid:200003181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"deutschepost.paymentservices.com.do",nocase; classtype:attempted-recon; sid:200003182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-lnbcss31.pantheonsite.io",nocase; classtype:attempted-recon; sid:200003183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-onedrivess.pantheonsite.io",nocase; classtype:attempted-recon; sid:200003184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-onlinemtbnk.pantheonsite.io",nocase; classtype:attempted-recon; sid:200003185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-partner.biz",nocase; classtype:attempted-recon; sid:200003186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-pourlaru45.pantheonsite.io",nocase; classtype:attempted-recon; sid:200003187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-ultravasttechgroup.pantheonsite.io",nocase; classtype:attempted-recon; sid:200003188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-vrd.pantheonsite.io",nocase; classtype:attempted-recon; sid:200003189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-vrr.pantheonsite.io",nocase; classtype:attempted-recon; sid:200003190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-webcontrolsantander.pantheonsite.io",nocase; classtype:attempted-recon; sid:200003191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev-websgmembre.pantheonsite.io",nocase; classtype:attempted-recon; sid:200003192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev.technotackle.com",nocase; classtype:attempted-recon; sid:200003193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev2.eruditeworks.com",nocase; classtype:attempted-recon; sid:200003194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev45.d108eq9ij6ratj.amplifyapp.com",nocase; classtype:attempted-recon; sid:200003195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev45.d108eq9ij6ratj.amplifyapp.com#sharon.koh@unicitynetwork.com",nocase; classtype:attempted-recon; sid:200003196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev5924.dxxsgb6hsq3ex.amplifyapp.com",nocase; classtype:attempted-recon; sid:200003197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dev7029.dxxsgb6hsq3ex.amplifyapp.com",nocase; classtype:attempted-recon; sid:200003198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfcsa56.hyperphp.com",nocase; classtype:attempted-recon; sid:200003199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgbf.xxocoda.cn",nocase; classtype:attempted-recon; sid:200003200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgdfs.xhmfnjh.cn",nocase; classtype:attempted-recon; sid:200003201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgfgh.lijakcs.cn",nocase; classtype:attempted-recon; sid:200003202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgfgs.rqpoomg.cn",nocase; classtype:attempted-recon; sid:200003203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgfhb.zoocgqb.cn",nocase; classtype:attempted-recon; sid:200003204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgge.wfuzhh.cn",nocase; classtype:attempted-recon; sid:200003205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfgvvd.ptbgytw.cn",nocase; classtype:attempted-recon; sid:200003206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfhgfj.bqcmoej.cn",nocase; classtype:attempted-recon; sid:200003207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfhggj.nvfproi.cn",nocase; classtype:attempted-recon; sid:200003208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfsales.co.uk",nocase; classtype:attempted-recon; sid:200003209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dfssfg.ssnwwuv.cn",nocase; classtype:attempted-recon; sid:200003210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dftojc.web.app",nocase; classtype:attempted-recon; sid:200003211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgbbgj.yretffb.cn",nocase; classtype:attempted-recon; sid:200003212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgdd.iksvkwp.cn",nocase; classtype:attempted-recon; sid:200003213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgdf.pcgzwye.cn",nocase; classtype:attempted-recon; sid:200003214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgdfcs.jtlhquk.cn",nocase; classtype:attempted-recon; sid:200003215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgdfs.llzrzhp.cn",nocase; classtype:attempted-recon; sid:200003216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgfh.nhaiqxq.cn",nocase; classtype:attempted-recon; sid:200003217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgfhd.orrqxhn.cn",nocase; classtype:attempted-recon; sid:200003218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgfhg.yosjokk.cn",nocase; classtype:attempted-recon; sid:200003219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgfoodsnet.myportfolio.com",nocase; classtype:attempted-recon; sid:200003220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgfrg.dgnrewu.cn",nocase; classtype:attempted-recon; sid:200003221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dggfddghhuf.web.app",nocase; classtype:attempted-recon; sid:200003222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dggfjh.xabzyrz.cn",nocase; classtype:attempted-recon; sid:200003223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dggjh.ncfkdap.cn",nocase; classtype:attempted-recon; sid:200003224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgkr2.hyperphp.com",nocase; classtype:attempted-recon; sid:200003225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgrfh.kwkzpxd.cn",nocase; classtype:attempted-recon; sid:200003226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgsfa.nozjvgc.cn",nocase; classtype:attempted-recon; sid:200003227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgthyrdthrds.hostfree.pw",nocase; classtype:attempted-recon; sid:200003228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgu9g3a2kzqx2.cloudfront.net",nocase; classtype:attempted-recon; sid:200003229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgvd.oqercyp.cn",nocase; classtype:attempted-recon; sid:200003230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dgw.soundestlink.com",nocase; classtype:attempted-recon; sid:200003231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhanushr24.github.io",nocase; classtype:attempted-recon; sid:200003232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhl.dunck-beta.acc-server.nl",nocase; classtype:attempted-recon; sid:200003233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhlparcel.sps-ocs.co.uk",nocase; classtype:attempted-recon; sid:200003234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhsh-nsk.ru",nocase; classtype:attempted-recon; sid:200003235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dhtlq.com",nocase; classtype:attempted-recon; sid:200003236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"diabetescarbcounting.com",nocase; classtype:attempted-recon; sid:200003237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"diamondplate.us",nocase; classtype:attempted-recon; sid:200003238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dicantrelend.blogspot.com",nocase; classtype:attempted-recon; sid:200003239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"die-post-swiss-id-19782635812.psd2any.com",nocase; classtype:attempted-recon; sid:200003240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"diepostinfostg.wpengine.com",nocase; classtype:attempted-recon; sid:200003241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"digeesell.com",nocase; classtype:attempted-recon; sid:200003242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"digiboxtest.com",nocase; classtype:attempted-recon; sid:200003243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"digitale-bnpparibas.fr",nocase; classtype:attempted-recon; sid:200003244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"digitalmps.info",nocase; classtype:attempted-recon; sid:200003245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"digitelescope.com",nocase; classtype:attempted-recon; sid:200003246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dilscordilgifxq.com",nocase; classtype:attempted-recon; sid:200003247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dimasffbrasil.com",nocase; classtype:attempted-recon; sid:200003248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dimictechnologies.com",nocase; classtype:attempted-recon; sid:200003249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dincee.com",nocase; classtype:attempted-recon; sid:200003250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dinersclubposssion.digitalholics.com",nocase; classtype:attempted-recon; sid:200003251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direct.smbc.co.jp.ljjsjl.com",nocase; classtype:attempted-recon; sid:200003252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direct.smbc.co.jp.pttkjs.com",nocase; classtype:attempted-recon; sid:200003253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direct.smbc.co.jplogin.giwl.cn",nocase; classtype:attempted-recon; sid:200003254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direct.smbc.co.jplogin.hfgnhsd.cn",nocase; classtype:attempted-recon; sid:200003255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"directiongeneraledesfinances-p.godaddysites.com",nocase; classtype:attempted-recon; sid:200003256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"direx.is-great.net",nocase; classtype:attempted-recon; sid:200003257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dirgold.easy.co",nocase; classtype:attempted-recon; sid:200003258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discofds.com",nocase; classtype:attempted-recon; sid:200003259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disconosci-db.net",nocase; classtype:attempted-recon; sid:200003260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discoordfreenitro.ru",nocase; classtype:attempted-recon; sid:200003261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discorbf.com",nocase; classtype:attempted-recon; sid:200003262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discord-gg.icu",nocase; classtype:attempted-recon; sid:200003263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discordsteam.org",nocase; classtype:attempted-recon; sid:200003264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discordx.icu",nocase; classtype:attempted-recon; sid:200003265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discorg.ru",nocase; classtype:attempted-recon; sid:200003266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discorsd.icu",nocase; classtype:attempted-recon; sid:200003267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discorxs.com",nocase; classtype:attempted-recon; sid:200003268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discoverdhaslkcxfinity1.560f866578.workers.dev",nocase; classtype:attempted-recon; sid:200003269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discrod-egifts.com",nocase; classtype:attempted-recon; sid:200003270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discrods-gifts.com",nocase; classtype:attempted-recon; sid:200003271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"distinctivei.com",nocase; classtype:attempted-recon; sid:200003272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"divine-bread-8903.on.fleek.co",nocase; classtype:attempted-recon; sid:200003273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"divino.zxinomoiszer.workers.dev",nocase; classtype:attempted-recon; sid:200003274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkb-b39184.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200003275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkb-kunden.de",nocase; classtype:attempted-recon; sid:200003276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkksilaban.helpprotections.workers.dev",nocase; classtype:attempted-recon; sid:200003277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dkksitamjuntakk.martulangsore.workers.dev",nocase; classtype:attempted-recon; sid:200003278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dl.9xu.com",nocase; classtype:attempted-recon; sid:200003279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlscordi.com",nocase; classtype:attempted-recon; sid:200003280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlscordz.com",nocase; classtype:attempted-recon; sid:200003281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dlscorg.icu",nocase; classtype:attempted-recon; sid:200003282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dm2.opq.pa-tarutung.go.id",nocase; classtype:attempted-recon; sid:200003283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dmdecors.com",nocase; classtype:attempted-recon; sid:200003284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dmsowii.ga",nocase; classtype:attempted-recon; sid:200003285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doanmnmmmmbnmdffd.weebly.com",nocase; classtype:attempted-recon; sid:200003286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doc-05.weebly.com",nocase; classtype:attempted-recon; sid:200003287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doccusend.com",nocase; classtype:attempted-recon; sid:200003288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doclab-console-auth.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doclab-console-auth.web.app",nocase; classtype:attempted-recon; sid:200003290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.revv.so",nocase; classtype:attempted-recon; sid:200003291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsharex-authorize.web.app",nocase; classtype:attempted-recon; sid:200003293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doctor-holz.com",nocase; classtype:attempted-recon; sid:200003294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doctornanda.com",nocase; classtype:attempted-recon; sid:200003295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-folder.chat-verify.workers.dev",nocase; classtype:attempted-recon; sid:200003296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-folder.ownyuguestyu.workers.dev",nocase; classtype:attempted-recon; sid:200003297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-folder.shared-reconnecting.workers.dev",nocase; classtype:attempted-recon; sid:200003298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-june.mature-auth.workers.dev",nocase; classtype:attempted-recon; sid:200003299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-private.direct-sustutelue.workers.dev",nocase; classtype:attempted-recon; sid:200003300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-project-june.voicee-love.workers.dev",nocase; classtype:attempted-recon; sid:200003301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-project.secure-count.workers.dev",nocase; classtype:attempted-recon; sid:200003302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-shared.datings-prev.workers.dev",nocase; classtype:attempted-recon; sid:200003303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document-update-progress.shared-filees.workers.dev",nocase; classtype:attempted-recon; sid:200003304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document.lates-proposale.workers.dev",nocase; classtype:attempted-recon; sid:200003305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document.project-shared-adobe.workers.dev",nocase; classtype:attempted-recon; sid:200003306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document.storages-clouds.workers.dev",nocase; classtype:attempted-recon; sid:200003307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"document7888w89890-s78ssjsj.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"documents.projects-june.workers.dev",nocase; classtype:attempted-recon; sid:200003309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docusignredtail.web.app",nocase; classtype:attempted-recon; sid:200003310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dofus-touch-com.fr",nocase; classtype:attempted-recon; sid:200003311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dofuspoulesnoobs.com",nocase; classtype:attempted-recon; sid:200003312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dokument-ua.com",nocase; classtype:attempted-recon; sid:200003313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dolunaytravel.com",nocase; classtype:attempted-recon; sid:200003314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator1.web.app",nocase; classtype:attempted-recon; sid:200003316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator100.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator100.web.app",nocase; classtype:attempted-recon; sid:200003318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator101.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator101.web.app",nocase; classtype:attempted-recon; sid:200003320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator102.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator102.web.app",nocase; classtype:attempted-recon; sid:200003322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator103.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator103.web.app",nocase; classtype:attempted-recon; sid:200003324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator104.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator104.web.app",nocase; classtype:attempted-recon; sid:200003326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator105.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator105.web.app",nocase; classtype:attempted-recon; sid:200003328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator106.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator106.web.app",nocase; classtype:attempted-recon; sid:200003330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator107.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator107.web.app",nocase; classtype:attempted-recon; sid:200003332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator108.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator108.web.app",nocase; classtype:attempted-recon; sid:200003334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator109.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator109.web.app",nocase; classtype:attempted-recon; sid:200003336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator11.web.app",nocase; classtype:attempted-recon; sid:200003338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator110.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator110.web.app",nocase; classtype:attempted-recon; sid:200003340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator111.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator111.web.app",nocase; classtype:attempted-recon; sid:200003342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator112.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator112.web.app",nocase; classtype:attempted-recon; sid:200003344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator113.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator113.web.app",nocase; classtype:attempted-recon; sid:200003346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator114.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator114.web.app",nocase; classtype:attempted-recon; sid:200003348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator115.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator115.web.app",nocase; classtype:attempted-recon; sid:200003350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator116.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator116.web.app",nocase; classtype:attempted-recon; sid:200003352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator117.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator117.web.app",nocase; classtype:attempted-recon; sid:200003354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator118.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator118.web.app",nocase; classtype:attempted-recon; sid:200003356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator119.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator119.web.app",nocase; classtype:attempted-recon; sid:200003358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator12.web.app",nocase; classtype:attempted-recon; sid:200003360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator120.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator120.web.app",nocase; classtype:attempted-recon; sid:200003362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator121.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator121.web.app",nocase; classtype:attempted-recon; sid:200003364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator122.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator122.web.app",nocase; classtype:attempted-recon; sid:200003366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator123.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator123.web.app",nocase; classtype:attempted-recon; sid:200003368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator124.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator124.web.app",nocase; classtype:attempted-recon; sid:200003370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator125.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator125.web.app",nocase; classtype:attempted-recon; sid:200003372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator126.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator126.web.app",nocase; classtype:attempted-recon; sid:200003374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator127.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator127.web.app",nocase; classtype:attempted-recon; sid:200003376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator128.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator128.web.app",nocase; classtype:attempted-recon; sid:200003378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator129.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator129.web.app",nocase; classtype:attempted-recon; sid:200003380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator13.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator13.web.app",nocase; classtype:attempted-recon; sid:200003382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator130.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator130.web.app",nocase; classtype:attempted-recon; sid:200003384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator131.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator131.web.app",nocase; classtype:attempted-recon; sid:200003386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator132.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator132.web.app",nocase; classtype:attempted-recon; sid:200003388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator133.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator133.web.app",nocase; classtype:attempted-recon; sid:200003390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator134.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator134.web.app",nocase; classtype:attempted-recon; sid:200003392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator135.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator135.web.app",nocase; classtype:attempted-recon; sid:200003394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator136.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator136.web.app",nocase; classtype:attempted-recon; sid:200003396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator137.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator137.web.app",nocase; classtype:attempted-recon; sid:200003398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator138.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator138.web.app",nocase; classtype:attempted-recon; sid:200003400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator139.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator139.web.app",nocase; classtype:attempted-recon; sid:200003402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator140.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator140.web.app",nocase; classtype:attempted-recon; sid:200003404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator141.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator141.web.app",nocase; classtype:attempted-recon; sid:200003406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator142.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator142.web.app",nocase; classtype:attempted-recon; sid:200003408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator143.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator143.web.app",nocase; classtype:attempted-recon; sid:200003410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator144.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator144.web.app",nocase; classtype:attempted-recon; sid:200003412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator145.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator145.web.app",nocase; classtype:attempted-recon; sid:200003414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator146.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator146.web.app",nocase; classtype:attempted-recon; sid:200003416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator147.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator147.web.app",nocase; classtype:attempted-recon; sid:200003418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator148.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator148.web.app",nocase; classtype:attempted-recon; sid:200003420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator149.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator149.web.app",nocase; classtype:attempted-recon; sid:200003422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator150.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator150.web.app",nocase; classtype:attempted-recon; sid:200003424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator151.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator151.web.app",nocase; classtype:attempted-recon; sid:200003426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator152.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator152.web.app",nocase; classtype:attempted-recon; sid:200003428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator153.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator153.web.app",nocase; classtype:attempted-recon; sid:200003430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator154.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator154.web.app",nocase; classtype:attempted-recon; sid:200003432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator155.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator155.web.app",nocase; classtype:attempted-recon; sid:200003434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator156.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator156.web.app",nocase; classtype:attempted-recon; sid:200003436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator157.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator157.web.app",nocase; classtype:attempted-recon; sid:200003438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator158.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator158.web.app",nocase; classtype:attempted-recon; sid:200003440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator159.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator159.web.app",nocase; classtype:attempted-recon; sid:200003442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator16.web.app",nocase; classtype:attempted-recon; sid:200003444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator160.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator160.web.app",nocase; classtype:attempted-recon; sid:200003446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator161.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator161.web.app",nocase; classtype:attempted-recon; sid:200003448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator162.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator162.web.app",nocase; classtype:attempted-recon; sid:200003450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator163.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator163.web.app",nocase; classtype:attempted-recon; sid:200003452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator164.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator164.web.app",nocase; classtype:attempted-recon; sid:200003454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator165.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator165.web.app",nocase; classtype:attempted-recon; sid:200003456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator166.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator166.web.app",nocase; classtype:attempted-recon; sid:200003458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator168.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator168.web.app",nocase; classtype:attempted-recon; sid:200003460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator169.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator169.web.app",nocase; classtype:attempted-recon; sid:200003462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator170.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator170.web.app",nocase; classtype:attempted-recon; sid:200003464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator171.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator171.web.app",nocase; classtype:attempted-recon; sid:200003466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator172.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator172.web.app",nocase; classtype:attempted-recon; sid:200003468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator173.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator173.web.app",nocase; classtype:attempted-recon; sid:200003470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator174.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator174.web.app",nocase; classtype:attempted-recon; sid:200003472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator175.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator175.web.app",nocase; classtype:attempted-recon; sid:200003474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator176.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator176.web.app",nocase; classtype:attempted-recon; sid:200003476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator177.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator177.web.app",nocase; classtype:attempted-recon; sid:200003478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator178.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator178.web.app",nocase; classtype:attempted-recon; sid:200003480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator179.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator179.web.app",nocase; classtype:attempted-recon; sid:200003482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator180.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator180.web.app",nocase; classtype:attempted-recon; sid:200003484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator181.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator181.web.app",nocase; classtype:attempted-recon; sid:200003486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator182.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator182.web.app",nocase; classtype:attempted-recon; sid:200003488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator183.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator183.web.app",nocase; classtype:attempted-recon; sid:200003490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator184.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator184.web.app",nocase; classtype:attempted-recon; sid:200003492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator185.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator185.web.app",nocase; classtype:attempted-recon; sid:200003494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator186.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator186.web.app",nocase; classtype:attempted-recon; sid:200003496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator187.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator187.web.app",nocase; classtype:attempted-recon; sid:200003498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator188.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator188.web.app",nocase; classtype:attempted-recon; sid:200003500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator189.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator189.web.app",nocase; classtype:attempted-recon; sid:200003502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator19.web.app",nocase; classtype:attempted-recon; sid:200003504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator190.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator190.web.app",nocase; classtype:attempted-recon; sid:200003506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator191.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator191.web.app",nocase; classtype:attempted-recon; sid:200003508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator192.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator192.web.app",nocase; classtype:attempted-recon; sid:200003510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator193.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator193.web.app",nocase; classtype:attempted-recon; sid:200003512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator194.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator194.web.app",nocase; classtype:attempted-recon; sid:200003514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator195.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator195.web.app",nocase; classtype:attempted-recon; sid:200003516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator196.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator196.web.app",nocase; classtype:attempted-recon; sid:200003518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator197.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator197.web.app",nocase; classtype:attempted-recon; sid:200003520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator198.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator198.web.app",nocase; classtype:attempted-recon; sid:200003522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator199.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator199.web.app",nocase; classtype:attempted-recon; sid:200003524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator2.web.app",nocase; classtype:attempted-recon; sid:200003526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator20.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator20.web.app",nocase; classtype:attempted-recon; sid:200003528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator200.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator200.web.app",nocase; classtype:attempted-recon; sid:200003530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator22.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator22.web.app",nocase; classtype:attempted-recon; sid:200003532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator23.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator23.web.app",nocase; classtype:attempted-recon; sid:200003534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator24.web.app",nocase; classtype:attempted-recon; sid:200003536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator25.web.app",nocase; classtype:attempted-recon; sid:200003538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator26.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator26.web.app",nocase; classtype:attempted-recon; sid:200003540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator3.web.app",nocase; classtype:attempted-recon; sid:200003542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator30.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator30.web.app",nocase; classtype:attempted-recon; sid:200003544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator31.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator31.web.app",nocase; classtype:attempted-recon; sid:200003546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator32.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator32.web.app",nocase; classtype:attempted-recon; sid:200003548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator33.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator33.web.app",nocase; classtype:attempted-recon; sid:200003550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator35.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator35.web.app",nocase; classtype:attempted-recon; sid:200003552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator36.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator36.web.app",nocase; classtype:attempted-recon; sid:200003554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator37.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator37.web.app",nocase; classtype:attempted-recon; sid:200003556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator38.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator38.web.app",nocase; classtype:attempted-recon; sid:200003558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator4.web.app",nocase; classtype:attempted-recon; sid:200003560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator40.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator40.web.app",nocase; classtype:attempted-recon; sid:200003562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator41.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator41.web.app",nocase; classtype:attempted-recon; sid:200003564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator42.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator42.web.app",nocase; classtype:attempted-recon; sid:200003566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator43.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator43.web.app",nocase; classtype:attempted-recon; sid:200003568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator44.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator44.web.app",nocase; classtype:attempted-recon; sid:200003570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator45.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator45.web.app",nocase; classtype:attempted-recon; sid:200003572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator46.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator46.web.app",nocase; classtype:attempted-recon; sid:200003574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator47.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator47.web.app",nocase; classtype:attempted-recon; sid:200003576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator48.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator48.web.app",nocase; classtype:attempted-recon; sid:200003578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator49.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator49.web.app",nocase; classtype:attempted-recon; sid:200003580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator5.web.app",nocase; classtype:attempted-recon; sid:200003582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator50.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator50.web.app",nocase; classtype:attempted-recon; sid:200003584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator51.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator51.web.app",nocase; classtype:attempted-recon; sid:200003586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator52.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator52.web.app",nocase; classtype:attempted-recon; sid:200003588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator53.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator53.web.app",nocase; classtype:attempted-recon; sid:200003590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator54.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator54.web.app",nocase; classtype:attempted-recon; sid:200003592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator55.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator55.web.app",nocase; classtype:attempted-recon; sid:200003594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator56.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator56.web.app",nocase; classtype:attempted-recon; sid:200003596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator57.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator57.web.app",nocase; classtype:attempted-recon; sid:200003598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator58.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator58.web.app",nocase; classtype:attempted-recon; sid:200003600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator59.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator59.web.app",nocase; classtype:attempted-recon; sid:200003602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator6.web.app",nocase; classtype:attempted-recon; sid:200003604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator60.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator60.web.app",nocase; classtype:attempted-recon; sid:200003606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator61.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator61.web.app",nocase; classtype:attempted-recon; sid:200003608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator62.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator62.web.app",nocase; classtype:attempted-recon; sid:200003610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator63.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator63.web.app",nocase; classtype:attempted-recon; sid:200003612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator64.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator64.web.app",nocase; classtype:attempted-recon; sid:200003614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator65.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator65.web.app",nocase; classtype:attempted-recon; sid:200003616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator67.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator67.web.app",nocase; classtype:attempted-recon; sid:200003618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator68.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator68.web.app",nocase; classtype:attempted-recon; sid:200003620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator69.web.app",nocase; classtype:attempted-recon; sid:200003621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator70.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator70.web.app",nocase; classtype:attempted-recon; sid:200003623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator72.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator72.web.app",nocase; classtype:attempted-recon; sid:200003625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator74.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator74.web.app",nocase; classtype:attempted-recon; sid:200003627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator75.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator75.web.app",nocase; classtype:attempted-recon; sid:200003629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator77.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator77.web.app",nocase; classtype:attempted-recon; sid:200003631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator78.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator78.web.app",nocase; classtype:attempted-recon; sid:200003633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator79.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator79.web.app",nocase; classtype:attempted-recon; sid:200003635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator8.web.app",nocase; classtype:attempted-recon; sid:200003637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator80.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator80.web.app",nocase; classtype:attempted-recon; sid:200003639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator81.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator81.web.app",nocase; classtype:attempted-recon; sid:200003641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator82.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator82.web.app",nocase; classtype:attempted-recon; sid:200003643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator83.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator83.web.app",nocase; classtype:attempted-recon; sid:200003645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator85.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator85.web.app",nocase; classtype:attempted-recon; sid:200003647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator86.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator86.web.app",nocase; classtype:attempted-recon; sid:200003649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator87.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator87.web.app",nocase; classtype:attempted-recon; sid:200003651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator88.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator88.web.app",nocase; classtype:attempted-recon; sid:200003653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator89.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator89.web.app",nocase; classtype:attempted-recon; sid:200003655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator9.web.app",nocase; classtype:attempted-recon; sid:200003657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator90.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator90.web.app",nocase; classtype:attempted-recon; sid:200003659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator91.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator91.web.app",nocase; classtype:attempted-recon; sid:200003661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator92.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator92.web.app",nocase; classtype:attempted-recon; sid:200003663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator93.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator93.web.app",nocase; classtype:attempted-recon; sid:200003665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator94.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator94.web.app",nocase; classtype:attempted-recon; sid:200003667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator95.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator95.web.app",nocase; classtype:attempted-recon; sid:200003669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator96.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator96.web.app",nocase; classtype:attempted-recon; sid:200003671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator97.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator97.web.app",nocase; classtype:attempted-recon; sid:200003673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator98.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator98.web.app",nocase; classtype:attempted-recon; sid:200003675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator99.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domain-authenticator99.web.app",nocase; classtype:attempted-recon; sid:200003677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domaincontroller.pmeimg.co.uk",nocase; classtype:attempted-recon; sid:200003678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg1.web.app",nocase; classtype:attempted-recon; sid:200003680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg10.web.app",nocase; classtype:attempted-recon; sid:200003682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg12.web.app",nocase; classtype:attempted-recon; sid:200003684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg15.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg15.web.app",nocase; classtype:attempted-recon; sid:200003686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg16.web.app",nocase; classtype:attempted-recon; sid:200003688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg17.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg17.web.app",nocase; classtype:attempted-recon; sid:200003690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg19.web.app",nocase; classtype:attempted-recon; sid:200003692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg2.web.app",nocase; classtype:attempted-recon; sid:200003694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg20.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg20.web.app",nocase; classtype:attempted-recon; sid:200003696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg21.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg21.web.app",nocase; classtype:attempted-recon; sid:200003698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg22.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg22.web.app",nocase; classtype:attempted-recon; sid:200003700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg23.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg23.web.app",nocase; classtype:attempted-recon; sid:200003702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg24.web.app",nocase; classtype:attempted-recon; sid:200003704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg25.web.app",nocase; classtype:attempted-recon; sid:200003706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg27.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg27.web.app",nocase; classtype:attempted-recon; sid:200003708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg28.web.app",nocase; classtype:attempted-recon; sid:200003710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg29.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg29.web.app",nocase; classtype:attempted-recon; sid:200003712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg3.web.app",nocase; classtype:attempted-recon; sid:200003714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg30.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg30.web.app",nocase; classtype:attempted-recon; sid:200003716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg31.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg31.web.app",nocase; classtype:attempted-recon; sid:200003718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg32.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg32.web.app",nocase; classtype:attempted-recon; sid:200003720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg33.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg33.web.app",nocase; classtype:attempted-recon; sid:200003722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg34.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg34.web.app",nocase; classtype:attempted-recon; sid:200003724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg35.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg35.web.app",nocase; classtype:attempted-recon; sid:200003726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg4.web.app",nocase; classtype:attempted-recon; sid:200003728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg6.web.app",nocase; classtype:attempted-recon; sid:200003730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg7.web.app",nocase; classtype:attempted-recon; sid:200003732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domappcheckomeg8.web.app",nocase; classtype:attempted-recon; sid:200003734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domesmarketing.com",nocase; classtype:attempted-recon; sid:200003735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domotec.com.uy",nocase; classtype:attempted-recon; sid:200003736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"donaldmacken.com.ng",nocase; classtype:attempted-recon; sid:200003737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dorouscom.com",nocase; classtype:attempted-recon; sid:200003738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dotscan.com",nocase; classtype:attempted-recon; sid:200003739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dovcbcdfjd.weeblysite.com",nocase; classtype:attempted-recon; sid:200003740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dowaba-s2dhl.blogspot.com",nocase; classtype:attempted-recon; sid:200003741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpcpl.com",nocase; classtype:attempted-recon; sid:200003742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpd-redelivery-uk.com",nocase; classtype:attempted-recon; sid:200003743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpfko-inv.web.app",nocase; classtype:attempted-recon; sid:200003744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpk.padangpanjang.go.id",nocase; classtype:attempted-recon; sid:200003745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpmasdaskj.pages.dev",nocase; classtype:attempted-recon; sid:200003746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dpools.betaholder.com",nocase; classtype:attempted-recon; sid:200003747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dqxyymabbd.duckdns.org",nocase; classtype:attempted-recon; sid:200003748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dragon-army.123ddns.com",nocase; classtype:attempted-recon; sid:200003749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drbazzpinx.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200003750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dreaminrotary.com",nocase; classtype:attempted-recon; sid:200003751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drftgy.weeblysite.com",nocase; classtype:attempted-recon; sid:200003752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drggjh.qdffimi.cn",nocase; classtype:attempted-recon; sid:200003753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.dataexpertservices.hu",nocase; classtype:attempted-recon; sid:200003754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"driveequitypartners.com",nocase; classtype:attempted-recon; sid:200003755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"droits.typeform.com",nocase; classtype:attempted-recon; sid:200003756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dropboxdocumentverifier.weebly.com",nocase; classtype:attempted-recon; sid:200003757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drpertmac.co.za",nocase; classtype:attempted-recon; sid:200003758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dry-shape-0bbc.sophia-pipefittinghtxd7833.workers.dev",nocase; classtype:attempted-recon; sid:200003759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dry-union-280f.diianekalll.workers.dev",nocase; classtype:attempted-recon; sid:200003760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dry-violet-309b.project-pdf-assets.workers.dev",nocase; classtype:attempted-recon; sid:200003761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsazx.hyrzjjp.cn",nocase; classtype:attempted-recon; sid:200003762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsbfinancialservice.com",nocase; classtype:attempted-recon; sid:200003763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dscvhbfg.wfwilcf.cn",nocase; classtype:attempted-recon; sid:200003764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsehksecjd.duckdns.org",nocase; classtype:attempted-recon; sid:200003765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dsgcbeonline.com",nocase; classtype:attempted-recon; sid:200003766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dskuk.org",nocase; classtype:attempted-recon; sid:200003767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dtaparelsltd.com",nocase; classtype:attempted-recon; sid:200003768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duahatii.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200003769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duncanchiro.ca",nocase; classtype:attempted-recon; sid:200003770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dunescapital.ae",nocase; classtype:attempted-recon; sid:200003771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duo-ange.com",nocase; classtype:attempted-recon; sid:200003772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"duobabiji.com",nocase; classtype:attempted-recon; sid:200003773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dvsrnrao.in",nocase; classtype:attempted-recon; sid:200003774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dwedw973.top",nocase; classtype:attempted-recon; sid:200003775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dwedw985.top",nocase; classtype:attempted-recon; sid:200003776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dwvgs.net",nocase; classtype:attempted-recon; sid:200003777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dxxmmyy.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dxxmmyy.web.app",nocase; classtype:attempted-recon; sid:200003779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dynastyclinic.ae",nocase; classtype:attempted-recon; sid:200003780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dyuvstyfawecteraw.blogspot.de",nocase; classtype:attempted-recon; sid:200003781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e-access.itservices.us.org",nocase; classtype:attempted-recon; sid:200003782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e-access.mycsp.us.com",nocase; classtype:attempted-recon; sid:200003783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e-cassare.org",nocase; classtype:attempted-recon; sid:200003784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e-sport.bti-if.dk",nocase; classtype:attempted-recon; sid:200003785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e-walletconnects.weebly.com",nocase; classtype:attempted-recon; sid:200003786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e4ff557e.sso-secure-mail04wtwdw4.pages.dev",nocase; classtype:attempted-recon; sid:200003787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e4ra.byethost8.com",nocase; classtype:attempted-recon; sid:200003788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"e63q45f9h5fr.clickfunnels.com",nocase; classtype:attempted-recon; sid:200003789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eager-rocky-pedestrian.glitch.me",nocase; classtype:attempted-recon; sid:200003790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eagleeyeapparel.com",nocase; classtype:attempted-recon; sid:200003791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"easepowerwashing.com",nocase; classtype:attempted-recon; sid:200003792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eccooutletpolska.com",nocase; classtype:attempted-recon; sid:200003793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ecngx318.inmotionhosting.com",nocase; classtype:attempted-recon; sid:200003794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ecoauthchain.com",nocase; classtype:attempted-recon; sid:200003795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"economic-poet-b50.notion.site",nocase; classtype:attempted-recon; sid:200003796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ecs-india.com",nocase; classtype:attempted-recon; sid:200003797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edgadyaponte.com",nocase; classtype:attempted-recon; sid:200003798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edgecryptood.net",nocase; classtype:attempted-recon; sid:200003799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edgecryptoxt.com",nocase; classtype:attempted-recon; sid:200003800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"editingthatworks.com",nocase; classtype:attempted-recon; sid:200003801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edocuments18032022app-1310252903.cos.na-ashburn.myqcloud.com",nocase; classtype:attempted-recon; sid:200003802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"edolineexpress.com",nocase; classtype:attempted-recon; sid:200003803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"educarteecuador.com",nocase; classtype:attempted-recon; sid:200003804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eemdme966.hyperphp.com",nocase; classtype:attempted-recon; sid:200003805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"efad-sa.com",nocase; classtype:attempted-recon; sid:200003806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"efax25042022-webapps1-1311433986.cos.ap-chengdu.myqcloud.com",nocase; classtype:attempted-recon; sid:200003807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"efecsos.com",nocase; classtype:attempted-recon; sid:200003808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eft-fund.org",nocase; classtype:attempted-recon; sid:200003809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"egis-group-file.godaddysites.com",nocase; classtype:attempted-recon; sid:200003810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"egniol.co.in",nocase; classtype:attempted-recon; sid:200003811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki-com.net.personaltoploginlboard.shop",nocase; classtype:attempted-recon; sid:200003812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki-neeticoo.xyz",nocase; classtype:attempted-recon; sid:200003813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki-net.ijnvrq.shop",nocase; classtype:attempted-recon; sid:200003814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki-nzt.com.personal.jgmd.com.cn",nocase; classtype:attempted-recon; sid:200003815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki-nzt.com.personal.jgmh.com.cn",nocase; classtype:attempted-recon; sid:200003816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki11-netinet.xyz",nocase; classtype:attempted-recon; sid:200003817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki11-netnet.xyz",nocase; classtype:attempted-recon; sid:200003818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eki11-ntne.xyz",nocase; classtype:attempted-recon; sid:200003819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ekki.osdspb.top",nocase; classtype:attempted-recon; sid:200003820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"electrocoolhvacr.com",nocase; classtype:attempted-recon; sid:200003821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"electronicanehuen.com",nocase; classtype:attempted-recon; sid:200003822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elegant-wide-blob.glitch.me",nocase; classtype:attempted-recon; sid:200003823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elektrikaengineering.com",nocase; classtype:attempted-recon; sid:200003824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elektroonline.pl",nocase; classtype:attempted-recon; sid:200003825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elfatnianass.github.io",nocase; classtype:attempted-recon; sid:200003826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elhussini.com",nocase; classtype:attempted-recon; sid:200003827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eli-ekinen.xyz",nocase; classtype:attempted-recon; sid:200003828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eliteskullsmilsimcwb.com.br",nocase; classtype:attempted-recon; sid:200003829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elle5588.com",nocase; classtype:attempted-recon; sid:200003830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elnmarch22.ml",nocase; classtype:attempted-recon; sid:200003831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elomo.ro",nocase; classtype:attempted-recon; sid:200003832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"elpasototalwaterdamagerestoration.com",nocase; classtype:attempted-recon; sid:200003833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"email-confirmation-ionos-team.glitch.me",nocase; classtype:attempted-recon; sid:200003834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"email302.com",nocase; classtype:attempted-recon; sid:200003835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailonedriveab5c802a62d5173498c6fff3674005c8ab5c802a62d5173498.newonemail2.workers.dev",nocase; classtype:attempted-recon; sid:200003836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailservices-webprovide-41a6.wemovetesting.workers.dev",nocase; classtype:attempted-recon; sid:200003837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailsettings.webflow.io",nocase; classtype:attempted-recon; sid:200003838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailverificationupdate39.godaddysites.com",nocase; classtype:attempted-recon; sid:200003839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailverificationupdate82.godaddysites.com",nocase; classtype:attempted-recon; sid:200003840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailverificationupdate9.godaddysites.com",nocase; classtype:attempted-recon; sid:200003841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emailwebaccess.co.uk",nocase; classtype:attempted-recon; sid:200003842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emenayox.web.app",nocase; classtype:attempted-recon; sid:200003843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emlink.me",nocase; classtype:attempted-recon; sid:200003844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emmemd99985.hyperphp.com",nocase; classtype:attempted-recon; sid:200003845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emperes.com",nocase; classtype:attempted-recon; sid:200003846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"employees.momentumgrps.workers.dev",nocase; classtype:attempted-recon; sid:200003847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emprego.projetosparente.com.br",nocase; classtype:attempted-recon; sid:200003848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"empty-river-1774.on.fleek.co",nocase; classtype:attempted-recon; sid:200003849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"empty-sky-0112.on.fleek.co",nocase; classtype:attempted-recon; sid:200003850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"empty-surf-0486.on.fleek.co",nocase; classtype:attempted-recon; sid:200003851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emsi-lobo.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"en.vivuni.workers.dev",nocase; classtype:attempted-recon; sid:200003853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enbolivia.com",nocase; classtype:attempted-recon; sid:200003854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encryptaiu.com",nocase; classtype:attempted-recon; sid:200003855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encryptbtck.com",nocase; classtype:attempted-recon; sid:200003856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encryptdrive.booogle.net",nocase; classtype:attempted-recon; sid:200003857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encrypthkpd.com",nocase; classtype:attempted-recon; sid:200003858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encryptodapps.pages.dev",nocase; classtype:attempted-recon; sid:200003859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"encurtador.dev",nocase; classtype:attempted-recon; sid:200003860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"engcamp.org",nocase; classtype:attempted-recon; sid:200003861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eniiniaprestam0smesdejuni0.com",nocase; classtype:attempted-recon; sid:200003862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enjoyapartments.com",nocase; classtype:attempted-recon; sid:200003863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enoisdf.hyperphp.com",nocase; classtype:attempted-recon; sid:200003864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"enquiry.geeta.edu.in",nocase; classtype:attempted-recon; sid:200003865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ensigncyun.pl",nocase; classtype:attempted-recon; sid:200003866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"envirofesttn.org",nocase; classtype:attempted-recon; sid:200003867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eolohosting.com",nocase; classtype:attempted-recon; sid:200003868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ep-2hv.pages.dev",nocase; classtype:attempted-recon; sid:200003869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"epochfinancialus.com",nocase; classtype:attempted-recon; sid:200003870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"epona.com.mx",nocase; classtype:attempted-recon; sid:200003871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"equipatepordentro.com.uy",nocase; classtype:attempted-recon; sid:200003872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eras7.cf",nocase; classtype:attempted-recon; sid:200003873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"erasff.hyperphp.com",nocase; classtype:attempted-recon; sid:200003874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ershamshad.github.io",nocase; classtype:attempted-recon; sid:200003875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ertrhgcv.wcbuvtm.cn",nocase; classtype:attempted-recon; sid:200003876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esasirplayt.liveblog365.com",nocase; classtype:attempted-recon; sid:200003877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eservicebits.com",nocase; classtype:attempted-recon; sid:200003878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esfdesentakip.com",nocase; classtype:attempted-recon; sid:200003879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esinnovativeinteriors.com",nocase; classtype:attempted-recon; sid:200003880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"espace-client-facture.com",nocase; classtype:attempted-recon; sid:200003881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"espacoconectar.com",nocase; classtype:attempted-recon; sid:200003882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esperanzabravo.com",nocase; classtype:attempted-recon; sid:200003883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"essentiallyalexis.com",nocase; classtype:attempted-recon; sid:200003884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"estetikway.com",nocase; classtype:attempted-recon; sid:200003885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etatrecharge.com",nocase; classtype:attempted-recon; sid:200003886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc-meisfrq.xyz",nocase; classtype:attempted-recon; sid:200003887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc-melsla.downloadfetch.com",nocase; classtype:attempted-recon; sid:200003888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etc.bfcbz.cn",nocase; classtype:attempted-recon; sid:200003889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etghvlakh3g381.shop",nocase; classtype:attempted-recon; sid:200003890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eth-pos.cc",nocase; classtype:attempted-recon; sid:200003891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eth-radar.com",nocase; classtype:attempted-recon; sid:200003892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eth-waet.com",nocase; classtype:attempted-recon; sid:200003893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eth988.com",nocase; classtype:attempted-recon; sid:200003894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethbass.com",nocase; classtype:attempted-recon; sid:200003895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethbw.net",nocase; classtype:attempted-recon; sid:200003896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethereum2pool.live",nocase; classtype:attempted-recon; sid:200003897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethhardfork.com",nocase; classtype:attempted-recon; sid:200003898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethhex.com",nocase; classtype:attempted-recon; sid:200003899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ethnictrendz.com",nocase; classtype:attempted-recon; sid:200003900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ettoyasqd.hyperphp.com",nocase; classtype:attempted-recon; sid:200003901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eugnerally-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200003902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eurexdjq.com",nocase; classtype:attempted-recon; sid:200003903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eurobengal.com",nocase; classtype:attempted-recon; sid:200003904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"europe-west2-my-project-90086352.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200003905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"europost-eu.biz",nocase; classtype:attempted-recon; sid:200003906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eusa-lombo.firebaseapp.com",nocase; classtype:attempted-recon; sid:200003907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ev.lumenjournal.org",nocase; classtype:attempted-recon; sid:200003908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"event-deutschland.club",nocase; classtype:attempted-recon; sid:200003909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eventgarenafreefireterbaru2022.xyz",nocase; classtype:attempted-recon; sid:200003910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"everestmotors.com.np",nocase; classtype:attempted-recon; sid:200003911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evolbithman.web.app",nocase; classtype:attempted-recon; sid:200003912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evolutionsny.com",nocase; classtype:attempted-recon; sid:200003913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evri-dispatch.com",nocase; classtype:attempted-recon; sid:200003914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evri-manage-status.com",nocase; classtype:attempted-recon; sid:200003915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ewfdsz.jntmbxm.cn",nocase; classtype:attempted-recon; sid:200003916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"excel-cloud-document-2021.square.site",nocase; classtype:attempted-recon; sid:200003917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"excelmanagementmali.com",nocase; classtype:attempted-recon; sid:200003918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exchange-biswap.pro",nocase; classtype:attempted-recon; sid:200003919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exchange4free.com",nocase; classtype:attempted-recon; sid:200003920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exchangepolygon.net",nocase; classtype:attempted-recon; sid:200003921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exito-validation.260mb.net",nocase; classtype:attempted-recon; sid:200003922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exitopaytuya.hostfree.pw",nocase; classtype:attempted-recon; sid:200003923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exitotuyapayfmw.hostfree.pw",nocase; classtype:attempted-recon; sid:200003924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exitoytuya.com",nocase; classtype:attempted-recon; sid:200003925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exitsecutt.260mb.net",nocase; classtype:attempted-recon; sid:200003926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exodus-wallet.yolasite.com",nocase; classtype:attempted-recon; sid:200003927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exoduswallet.link",nocase; classtype:attempted-recon; sid:200003928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exoduswallet36.mypixieset.com",nocase; classtype:attempted-recon; sid:200003929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exodusweb-pro.com",nocase; classtype:attempted-recon; sid:200003930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"express-receive-parcel.trackshipmentfaster.net",nocase; classtype:attempted-recon; sid:200003931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"extracloud.com.au",nocase; classtype:attempted-recon; sid:200003932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"extractiondatanet425.ga",nocase; classtype:attempted-recon; sid:200003933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eyebeyasvda.liveblog365.com",nocase; classtype:attempted-recon; sid:200003934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ezblox.site",nocase; classtype:attempted-recon; sid:200003935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ezssausage.com",nocase; classtype:attempted-recon; sid:200003936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"f2ax5-jqaaa-aaaad-qcutq-cai.ic0.app",nocase; classtype:attempted-recon; sid:200003937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"f2pool.one",nocase; classtype:attempted-recon; sid:200003938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"f9w1lned0ruqblxi6jahwotak.filesusr.com",nocase; classtype:attempted-recon; sid:200003939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-accts.pages-recovery.workers.dev",nocase; classtype:attempted-recon; sid:200003940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-form20.ml",nocase; classtype:attempted-recon; sid:200003941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-form22.ml",nocase; classtype:attempted-recon; sid:200003942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues131.tk",nocase; classtype:attempted-recon; sid:200003943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues138.tk",nocase; classtype:attempted-recon; sid:200003944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues182.tk",nocase; classtype:attempted-recon; sid:200003945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues189.tk",nocase; classtype:attempted-recon; sid:200003946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues194.tk",nocase; classtype:attempted-recon; sid:200003947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues195.tk",nocase; classtype:attempted-recon; sid:200003948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues196.tk",nocase; classtype:attempted-recon; sid:200003949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues199.tk",nocase; classtype:attempted-recon; sid:200003950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues202.tk",nocase; classtype:attempted-recon; sid:200003951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues203.tk",nocase; classtype:attempted-recon; sid:200003952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues21.ml",nocase; classtype:attempted-recon; sid:200003953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues212.tk",nocase; classtype:attempted-recon; sid:200003954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues214.tk",nocase; classtype:attempted-recon; sid:200003955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues216.tk",nocase; classtype:attempted-recon; sid:200003956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues219.tk",nocase; classtype:attempted-recon; sid:200003957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues220.tk",nocase; classtype:attempted-recon; sid:200003958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues221.tk",nocase; classtype:attempted-recon; sid:200003959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues236.tk",nocase; classtype:attempted-recon; sid:200003960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues237.tk",nocase; classtype:attempted-recon; sid:200003961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues238.tk",nocase; classtype:attempted-recon; sid:200003962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues240.tk",nocase; classtype:attempted-recon; sid:200003963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues244.tk",nocase; classtype:attempted-recon; sid:200003964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-issues245.tk",nocase; classtype:attempted-recon; sid:200003965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform1.tk",nocase; classtype:attempted-recon; sid:200003966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform10.tk",nocase; classtype:attempted-recon; sid:200003967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform13.tk",nocase; classtype:attempted-recon; sid:200003968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform14.tk",nocase; classtype:attempted-recon; sid:200003969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform15.tk",nocase; classtype:attempted-recon; sid:200003970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform16.tk",nocase; classtype:attempted-recon; sid:200003971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform17.tk",nocase; classtype:attempted-recon; sid:200003972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform18.tk",nocase; classtype:attempted-recon; sid:200003973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform19.tk",nocase; classtype:attempted-recon; sid:200003974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform2.tk",nocase; classtype:attempted-recon; sid:200003975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform20.tk",nocase; classtype:attempted-recon; sid:200003976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform4.tk",nocase; classtype:attempted-recon; sid:200003977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform8.tk",nocase; classtype:attempted-recon; sid:200003978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-policyform9.tk",nocase; classtype:attempted-recon; sid:200003979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebook-security01-wabnode-com.webnode.page",nocase; classtype:attempted-recon; sid:200003980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facebooklogin.pages.dev",nocase; classtype:attempted-recon; sid:200003981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faceit.premiumbattles.com",nocase; classtype:attempted-recon; sid:200003982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facenboollogin.blogspot.com",nocase; classtype:attempted-recon; sid:200003983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facti.mx",nocase; classtype:attempted-recon; sid:200003984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"failed-delivery-fee.webstyty.fr",nocase; classtype:attempted-recon; sid:200003985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faizankhan0408.github.io",nocase; classtype:attempted-recon; sid:200003986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"falconbyte.net",nocase; classtype:attempted-recon; sid:200003987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"falling-hat-3ec1.lamluvotre8970.workers.dev",nocase; classtype:attempted-recon; sid:200003988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"falling-heart-4057.on.fleek.co",nocase; classtype:attempted-recon; sid:200003989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"falling-resonance-9f91.westernroad.workers.dev",nocase; classtype:attempted-recon; sid:200003990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancy-rain-22bf.vakagew948.workers.dev",nocase; classtype:attempted-recon; sid:200003991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancy-sky-8346.on.fleek.co",nocase; classtype:attempted-recon; sid:200003992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancy.bibirgadangdicipok.workers.dev",nocase; classtype:attempted-recon; sid:200003993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fancyexpeditions.com",nocase; classtype:attempted-recon; sid:200003994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fangshandx.com",nocase; classtype:attempted-recon; sid:200003995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"farconavenue.com",nocase; classtype:attempted-recon; sid:200003996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fast.for-orders.com",nocase; classtype:attempted-recon; sid:200003997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fastappsolutions.com",nocase; classtype:attempted-recon; sid:200003998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fax-29042022-00512fax-1311615844.cos.ap-nanjing.myqcloud.com",nocase; classtype:attempted-recon; sid:200003999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fax-doc25042022webfax-1311433986.cos.ap-nanjing.myqcloud.com",nocase; classtype:attempted-recon; sid:200004000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fax07032022doc1-1310019602.cos.na-siliconvalley.myqcloud.com",nocase; classtype:attempted-recon; sid:200004001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fax07042022fax498apps58-1310726006.cos.ap-seoul.myqcloud.com",nocase; classtype:attempted-recon; sid:200004002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"faxtransfer.weebly.com",nocase; classtype:attempted-recon; sid:200004003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb-case-id-28031803-fcdc-48af.web.app",nocase; classtype:attempted-recon; sid:200004004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb-pages.proteksion-help.workers.dev",nocase; classtype:attempted-recon; sid:200004005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb.kiabeta.com.ng",nocase; classtype:attempted-recon; sid:200004006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fb7927.bget.ru",nocase; classtype:attempted-recon; sid:200004007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbfcca.ekauprp.cn",nocase; classtype:attempted-recon; sid:200004008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbfs.vxrlhph.cn",nocase; classtype:attempted-recon; sid:200004009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbnoticehlprcvry01.co.vu",nocase; classtype:attempted-recon; sid:200004010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fbwnhoucrq.duckdns.org",nocase; classtype:attempted-recon; sid:200004011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fccdx.us",nocase; classtype:attempted-recon; sid:200004012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fccfc.org",nocase; classtype:attempted-recon; sid:200004013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdcxv.4gc7da74.cn",nocase; classtype:attempted-recon; sid:200004014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdjnhbvgjsc.weeblysite.com",nocase; classtype:attempted-recon; sid:200004015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscvx.xvtygnz.cn",nocase; classtype:attempted-recon; sid:200004016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdscx.jqifiun.cn",nocase; classtype:attempted-recon; sid:200004017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsdfghng44.webcindario.com",nocase; classtype:attempted-recon; sid:200004018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdskv.cwqnvxw.cn",nocase; classtype:attempted-recon; sid:200004019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsvbc.qpmcgny.cn",nocase; classtype:attempted-recon; sid:200004020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdsxzs.feksnii.cn",nocase; classtype:attempted-recon; sid:200004021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fdx17.hyperphp.com",nocase; classtype:attempted-recon; sid:200004022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"federales.validacionoficial.com",nocase; classtype:attempted-recon; sid:200004023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feelbons.com",nocase; classtype:attempted-recon; sid:200004024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"femmaterparaguay.x10.mx",nocase; classtype:attempted-recon; sid:200004025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fenghuanzx.vip",nocase; classtype:attempted-recon; sid:200004026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fer-brooks.top",nocase; classtype:attempted-recon; sid:200004027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ff-member-gareza.com",nocase; classtype:attempted-recon; sid:200004028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ff.ritendradas.com.np",nocase; classtype:attempted-recon; sid:200004029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgadweeeeebly.weeblysite.com",nocase; classtype:attempted-recon; sid:200004030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgbvcx.bsxwbys.cn",nocase; classtype:attempted-recon; sid:200004031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgdacs.ethvpda.cn",nocase; classtype:attempted-recon; sid:200004032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgdb.1g1c06.cn",nocase; classtype:attempted-recon; sid:200004033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgdsc.jhlbkdt.cn",nocase; classtype:attempted-recon; sid:200004034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgenm-6qaaa-aaaad-qcurq-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200004035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgfgm.wkomvdf.cn",nocase; classtype:attempted-recon; sid:200004036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghdc.bokeedb.cn",nocase; classtype:attempted-recon; sid:200004037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghdr.xzxmlzt.cn",nocase; classtype:attempted-recon; sid:200004038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghdskjhgjhkljg.ihostfull.com",nocase; classtype:attempted-recon; sid:200004039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghgs.gcmdedj.cn",nocase; classtype:attempted-recon; sid:200004040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fghjr74rhudfguhtfguji.blogspot.com",nocase; classtype:attempted-recon; sid:200004041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgrdsxz.rrtsery.cn",nocase; classtype:attempted-recon; sid:200004042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fgvds.aydsgji.cn",nocase; classtype:attempted-recon; sid:200004043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhbfdg.ckxsepx.cn",nocase; classtype:attempted-recon; sid:200004044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhersj.cfutmrr.cn",nocase; classtype:attempted-recon; sid:200004045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhfgj.dtgsfcn.cn",nocase; classtype:attempted-recon; sid:200004046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhfh.m0qznc.cn",nocase; classtype:attempted-recon; sid:200004047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhgfge.ezbwhjd.cn",nocase; classtype:attempted-recon; sid:200004048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhgfj.fxuvhpg.cn",nocase; classtype:attempted-recon; sid:200004049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhgtj.uwlgzih.cn",nocase; classtype:attempted-recon; sid:200004050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhrdfs.ihqkfmb.cn",nocase; classtype:attempted-recon; sid:200004051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fhzckumqee.duckdns.org",nocase; classtype:attempted-recon; sid:200004052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ficohsa01.x10.mx",nocase; classtype:attempted-recon; sid:200004053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ficohsasindario.webcindario.com",nocase; classtype:attempted-recon; sid:200004054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ficoonlinealos.webcindario.com",nocase; classtype:attempted-recon; sid:200004055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ficoshmacofig.x10.mx",nocase; classtype:attempted-recon; sid:200004056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ficosvconfig.webcindario.com",nocase; classtype:attempted-recon; sid:200004057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fidelitybank-mn.net",nocase; classtype:attempted-recon; sid:200004058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fidelitybank-ng.online",nocase; classtype:attempted-recon; sid:200004059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fighting40s.com",nocase; classtype:attempted-recon; sid:200004060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fileee4.godaddysites.com",nocase; classtype:attempted-recon; sid:200004061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"files.landing-invoice.workers.dev",nocase; classtype:attempted-recon; sid:200004062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"files.recloud-shared.workers.dev",nocase; classtype:attempted-recon; sid:200004063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fileyellowelite.com",nocase; classtype:attempted-recon; sid:200004064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"film.jaheshguilan.com",nocase; classtype:attempted-recon; sid:200004065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"filname-pool.hostfree.pw",nocase; classtype:attempted-recon; sid:200004066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finalsolutions.eu",nocase; classtype:attempted-recon; sid:200004067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finance-ch.preview-domain.com",nocase; classtype:attempted-recon; sid:200004068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"financeapp.xyz",nocase; classtype:attempted-recon; sid:200004069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"financepouche.com",nocase; classtype:attempted-recon; sid:200004070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finecoding.com",nocase; classtype:attempted-recon; sid:200004071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finfutureonliup.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"finfutureonliup.web.app",nocase; classtype:attempted-recon; sid:200004073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fire.martobang.workers.dev",nocase; classtype:attempted-recon; sid:200004074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firstsourcesbus.com",nocase; classtype:attempted-recon; sid:200004075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fitathome.ca",nocase; classtype:attempted-recon; sid:200004076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fiverrespana.com",nocase; classtype:attempted-recon; sid:200004077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fivesplash.in",nocase; classtype:attempted-recon; sid:200004078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fixemobileconnectinfoline.justns.ru",nocase; classtype:attempted-recon; sid:200004079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fixi.rest",nocase; classtype:attempted-recon; sid:200004080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fixupalltokenwallets.com",nocase; classtype:attempted-recon; sid:200004081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fjjfjdf.sitey.me",nocase; classtype:attempted-recon; sid:200004082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flat-9be3.marpuasabentar.workers.dev",nocase; classtype:attempted-recon; sid:200004083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flat-haze-1211.on.fleek.co",nocase; classtype:attempted-recon; sid:200004084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flcancer39-px.rtrk.com",nocase; classtype:attempted-recon; sid:200004085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fleetguard.lat",nocase; classtype:attempted-recon; sid:200004086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flightscare.co.uk",nocase; classtype:attempted-recon; sid:200004087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"floral-poetry-8ef1.gesojula.workers.dev",nocase; classtype:attempted-recon; sid:200004088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"floranostra.hu",nocase; classtype:attempted-recon; sid:200004089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"florejackie.fr",nocase; classtype:attempted-recon; sid:200004090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fluksrv.mycpanel.rs",nocase; classtype:attempted-recon; sid:200004091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flyairprestige.com",nocase; classtype:attempted-recon; sid:200004092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fmp.wordpressmlm.com",nocase; classtype:attempted-recon; sid:200004093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fmwebapp.azurewebsites.net",nocase; classtype:attempted-recon; sid:200004094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fnthaidairies.com",nocase; classtype:attempted-recon; sid:200004095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fokasbeyond.com",nocase; classtype:attempted-recon; sid:200004096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder-document.protect-shaared.workers.dev",nocase; classtype:attempted-recon; sid:200004097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder-private.erinlemono.workers.dev",nocase; classtype:attempted-recon; sid:200004098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder.verify-files.workers.dev",nocase; classtype:attempted-recon; sid:200004099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder737873u0e0-89ui3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder737873u0e0-89ui3.web.app",nocase; classtype:attempted-recon; sid:200004101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder778783-39s98373e8e.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder778783-39s98373e8e.web.app",nocase; classtype:attempted-recon; sid:200004103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder78388389s-s877iuee.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder788738uijk-3893uij3.web.app",nocase; classtype:attempted-recon; sid:200004105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder788983is38i-3933.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder788983is38i-3933.web.app",nocase; classtype:attempted-recon; sid:200004107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folder889849894040-e89uiekje.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"folkstaracademy.com",nocase; classtype:attempted-recon; sid:200004109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fomalitysary.com",nocase; classtype:attempted-recon; sid:200004110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fon-gsm.pl",nocase; classtype:attempted-recon; sid:200004111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foodbank.gr",nocase; classtype:attempted-recon; sid:200004112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foodtechnology.info",nocase; classtype:attempted-recon; sid:200004113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forcemilperu.com",nocase; classtype:attempted-recon; sid:200004114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foresta-mod.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forlife-co.com",nocase; classtype:attempted-recon; sid:200004116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form-events-hypesquad.gq",nocase; classtype:attempted-recon; sid:200004117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"formappmetas.cf",nocase; classtype:attempted-recon; sid:200004118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"formbuddy.com",nocase; classtype:attempted-recon; sid:200004119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"formez-vous.eligibilite-web.com",nocase; classtype:attempted-recon; sid:200004120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.formium.io",nocase; classtype:attempted-recon; sid:200004121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"formtools.com",nocase; classtype:attempted-recon; sid:200004122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"foundlation.app",nocase; classtype:attempted-recon; sid:200004123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fpalpha.myportfolio.com",nocase; classtype:attempted-recon; sid:200004124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fqcupktbpp.duckdns.org",nocase; classtype:attempted-recon; sid:200004125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fragrant-grass-5770.scrtygdjahg.workers.dev",nocase; classtype:attempted-recon; sid:200004126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frankedu.com",nocase; classtype:attempted-recon; sid:200004127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frankfurtertsparkasse.web.app",nocase; classtype:attempted-recon; sid:200004128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"free-covid-19-stimulus-bonus.nethouse.ru",nocase; classtype:attempted-recon; sid:200004129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freedomtg3656.club",nocase; classtype:attempted-recon; sid:200004130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freeipinboxes.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freeipinboxes.web.app",nocase; classtype:attempted-recon; sid:200004132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freeliker.net",nocase; classtype:attempted-recon; sid:200004133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freemetamask.com",nocase; classtype:attempted-recon; sid:200004134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freesolana.app",nocase; classtype:attempted-recon; sid:200004135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freg-nine.pt",nocase; classtype:attempted-recon; sid:200004136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"freim-regulation.hostfree.pw",nocase; classtype:attempted-recon; sid:200004137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frhfgjh.orxhoqb.cn",nocase; classtype:attempted-recon; sid:200004138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frhgr.shfckey.cn",nocase; classtype:attempted-recon; sid:200004139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"friendsofnechockey.com",nocase; classtype:attempted-recon; sid:200004140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"friss.com.ec",nocase; classtype:attempted-recon; sid:200004141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frm2ver.weebly.com",nocase; classtype:attempted-recon; sid:200004142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frosty-lab-d5f8.source0542-mail-docxs.workers.dev",nocase; classtype:attempted-recon; sid:200004143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frosty-leaf-7076.on.fleek.co",nocase; classtype:attempted-recon; sid:200004144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"frosty-violet-0628.on.fleek.co",nocase; classtype:attempted-recon; sid:200004145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fsbomktgpro.com",nocase; classtype:attempted-recon; sid:200004146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fsdsg.cc",nocase; classtype:attempted-recon; sid:200004147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftd4b-7yaaa-aaaad-qcusa-cai.raw.ic0.app",nocase; classtype:attempted-recon; sid:200004148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftdggz.hyperphp.com",nocase; classtype:attempted-recon; sid:200004149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftp.cnc.fr",nocase; classtype:attempted-recon; sid:200004150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-ca.com",nocase; classtype:attempted-recon; sid:200004151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-pro-register.pro",nocase; classtype:attempted-recon; sid:200004152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-register-pro.world",nocase; classtype:attempted-recon; sid:200004153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-register.biz",nocase; classtype:attempted-recon; sid:200004154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-register.website",nocase; classtype:attempted-recon; sid:200004155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx-signup.pro",nocase; classtype:attempted-recon; sid:200004156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx.cool",nocase; classtype:attempted-recon; sid:200004157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx.tours",nocase; classtype:attempted-recon; sid:200004158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx012.com",nocase; classtype:attempted-recon; sid:200004159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx0x.com",nocase; classtype:attempted-recon; sid:200004160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx28.com",nocase; classtype:attempted-recon; sid:200004161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx38.com",nocase; classtype:attempted-recon; sid:200004162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx39.com",nocase; classtype:attempted-recon; sid:200004163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx6.vip",nocase; classtype:attempted-recon; sid:200004164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx666888123ftxapp.com",nocase; classtype:attempted-recon; sid:200004165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx75.com",nocase; classtype:attempted-recon; sid:200004166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftx777.com",nocase; classtype:attempted-recon; sid:200004167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftxbic.com",nocase; classtype:attempted-recon; sid:200004168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ftxbonus.site",nocase; classtype:attempted-recon; sid:200004169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fuelaklxxm.web.app",nocase; classtype:attempted-recon; sid:200004170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"funiswap.exchange",nocase; classtype:attempted-recon; sid:200004171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"furryvengeancefve1.blogspot.com",nocase; classtype:attempted-recon; sid:200004172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fwzf322.hyperphp.com",nocase; classtype:attempted-recon; sid:200004173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fx164fax08022022fax-1310019602.cos.eu-frankfurt.myqcloud.com",nocase; classtype:attempted-recon; sid:200004174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fx23032022fx1apps87-1310418193.cos.eu-frankfurt.myqcloud.com",nocase; classtype:attempted-recon; sid:200004175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fx406543docs4580246-1309906520.cos.eu-frankfurt.myqcloud.com",nocase; classtype:attempted-recon; sid:200004176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fxhalifax.com",nocase; classtype:attempted-recon; sid:200004177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fyndiqaq.cc",nocase; classtype:attempted-recon; sid:200004178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fyrozkt.top",nocase; classtype:attempted-recon; sid:200004179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"g-mtcc.com",nocase; classtype:attempted-recon; sid:200004180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"galsinsights.com",nocase; classtype:attempted-recon; sid:200004181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"game-defiknidgoms.com",nocase; classtype:attempted-recon; sid:200004182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"game.hicage.com",nocase; classtype:attempted-recon; sid:200004183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gannima.co.jp.vpqbei.top",nocase; classtype:attempted-recon; sid:200004184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"garena-xacminhtaikhoan.com",nocase; classtype:attempted-recon; sid:200004185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"garenafreefirebts.com",nocase; classtype:attempted-recon; sid:200004186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gas-refund.pics",nocase; classtype:attempted-recon; sid:200004187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gas-refund.sbs",nocase; classtype:attempted-recon; sid:200004188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gatewaytechitservices.com",nocase; classtype:attempted-recon; sid:200004189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gbpjq.com",nocase; classtype:attempted-recon; sid:200004190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gc.elin.co.za",nocase; classtype:attempted-recon; sid:200004191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gdedsfa.nyvlwje.cn",nocase; classtype:attempted-recon; sid:200004192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gdmservices.com.au",nocase; classtype:attempted-recon; sid:200004193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefg.jfxuabg.cn",nocase; classtype:attempted-recon; sid:200004194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun00521.top",nocase; classtype:attempted-recon; sid:200004195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun22502.top",nocase; classtype:attempted-recon; sid:200004196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun23103.top",nocase; classtype:attempted-recon; sid:200004197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun25685.top",nocase; classtype:attempted-recon; sid:200004198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun36385.top",nocase; classtype:attempted-recon; sid:200004199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun56158.top",nocase; classtype:attempted-recon; sid:200004200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun59985.top",nocase; classtype:attempted-recon; sid:200004201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun61077.top",nocase; classtype:attempted-recon; sid:200004202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun62611.top",nocase; classtype:attempted-recon; sid:200004203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun69929.top",nocase; classtype:attempted-recon; sid:200004204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun70870.top",nocase; classtype:attempted-recon; sid:200004205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun72929.top",nocase; classtype:attempted-recon; sid:200004206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun78803.top",nocase; classtype:attempted-recon; sid:200004207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gefun96972.top",nocase; classtype:attempted-recon; sid:200004208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geg.li",nocase; classtype:attempted-recon; sid:200004209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna1.web.app",nocase; classtype:attempted-recon; sid:200004211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna10.web.app",nocase; classtype:attempted-recon; sid:200004213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna11.web.app",nocase; classtype:attempted-recon; sid:200004215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna12.web.app",nocase; classtype:attempted-recon; sid:200004217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna2.web.app",nocase; classtype:attempted-recon; sid:200004219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna4.web.app",nocase; classtype:attempted-recon; sid:200004221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna5.web.app",nocase; classtype:attempted-recon; sid:200004223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna6.web.app",nocase; classtype:attempted-recon; sid:200004224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna8.web.app",nocase; classtype:attempted-recon; sid:200004226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geionthahjdhna9.web.app",nocase; classtype:attempted-recon; sid:200004228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gemini-00e.blogspot.com",nocase; classtype:attempted-recon; sid:200004229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geminimobimovel.blogspot.com",nocase; classtype:attempted-recon; sid:200004230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gen-30.webcindario.com",nocase; classtype:attempted-recon; sid:200004231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gen1yutjhfhu.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gen2hjgfjyefy.web.app",nocase; classtype:attempted-recon; sid:200004233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gen3jfhvdjkjfdhf.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gen3jfhvdjkjfdhf.web.app",nocase; classtype:attempted-recon; sid:200004235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gen65656457878.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gen65656457878.web.app",nocase; classtype:attempted-recon; sid:200004237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"genath.hyperphp.com",nocase; classtype:attempted-recon; sid:200004238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"genehmigencorner.com",nocase; classtype:attempted-recon; sid:200004239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"general-3c39b.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"generateethereum.com",nocase; classtype:attempted-recon; sid:200004241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"genie-alba.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gentl.bibirkumaumeletus.workers.dev",nocase; classtype:attempted-recon; sid:200004243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geodrive.in",nocase; classtype:attempted-recon; sid:200004244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geraunoc-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200004245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gerenciador.caixagov.site",nocase; classtype:attempted-recon; sid:200004246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"germbcw.hclcsolutions.com",nocase; classtype:attempted-recon; sid:200004247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gesolutionsca.com",nocase; classtype:attempted-recon; sid:200004248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gestionarcitadaviviendaenlinea.com",nocase; classtype:attempted-recon; sid:200004249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gestionhumana.com.mx",nocase; classtype:attempted-recon; sid:200004250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gestionsigwebchile.com",nocase; classtype:attempted-recon; sid:200004251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getapps.vip",nocase; classtype:attempted-recon; sid:200004252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getaticvationpagesresolved.co.vu",nocase; classtype:attempted-recon; sid:200004253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getfremlbb.com",nocase; classtype:attempted-recon; sid:200004254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getlikesfree.com",nocase; classtype:attempted-recon; sid:200004255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getme.co.nz",nocase; classtype:attempted-recon; sid:200004256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getsdesancielymfae.tk",nocase; classtype:attempted-recon; sid:200004257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"geu9-cn.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcxs.jjgkjhr.cn",nocase; classtype:attempted-recon; sid:200004259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdcxz.tzf0hp.cn",nocase; classtype:attempted-recon; sid:200004260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdgc.mhvkkha.cn",nocase; classtype:attempted-recon; sid:200004261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdgh.rzutgmw.cn",nocase; classtype:attempted-recon; sid:200004262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdsnb.lcbcvp.cn",nocase; classtype:attempted-recon; sid:200004263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfdxc.iavqruq.cn",nocase; classtype:attempted-recon; sid:200004264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfhcv.jbxbglk.cn",nocase; classtype:attempted-recon; sid:200004265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfhdfr.akwstjc.cn",nocase; classtype:attempted-recon; sid:200004266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfhgesa.iwdolit.cn",nocase; classtype:attempted-recon; sid:200004267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfhgfd.gmmbnze.cn",nocase; classtype:attempted-recon; sid:200004268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfiler80.godaddysites.com",nocase; classtype:attempted-recon; sid:200004269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gfxx.creatorlink.net",nocase; classtype:attempted-recon; sid:200004270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ggffftfhhfft.byethost5.com",nocase; classtype:attempted-recon; sid:200004271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gggghheteyeye.weeblysite.com",nocase; classtype:attempted-recon; sid:200004272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghargharservices.com",nocase; classtype:attempted-recon; sid:200004273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghbfv.qrirowv.cn",nocase; classtype:attempted-recon; sid:200004274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdc.zarlavr.cn",nocase; classtype:attempted-recon; sid:200004275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghfdcx.dfyic17.cn",nocase; classtype:attempted-recon; sid:200004276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghjfrged.wecrtje.cn",nocase; classtype:attempted-recon; sid:200004277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghjkjhyder56t.godaddysites.com",nocase; classtype:attempted-recon; sid:200004278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghjt90.godaddysites.com",nocase; classtype:attempted-recon; sid:200004279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghnffsw.gctsrdt.cn",nocase; classtype:attempted-recon; sid:200004280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ghorana.com",nocase; classtype:attempted-recon; sid:200004281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gibsononcology.com",nocase; classtype:attempted-recon; sid:200004282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gic-ocbc.com",nocase; classtype:attempted-recon; sid:200004283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gicsingaporetrade.com",nocase; classtype:attempted-recon; sid:200004284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"girls-tube.mobi",nocase; classtype:attempted-recon; sid:200004285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"giveaway-senspark.com",nocase; classtype:attempted-recon; sid:200004286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gjdfj.sabddpr.cn",nocase; classtype:attempted-recon; sid:200004287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gjfg.joiigxj.cn",nocase; classtype:attempted-recon; sid:200004288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gjfgfd.obhielb.cn",nocase; classtype:attempted-recon; sid:200004289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gjhdrfg.svcypor.cn",nocase; classtype:attempted-recon; sid:200004290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gjyuj.ingumed.cn",nocase; classtype:attempted-recon; sid:200004291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gkncdesfft.duckdns.org",nocase; classtype:attempted-recon; sid:200004292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glbxvyp.top",nocase; classtype:attempted-recon; sid:200004293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glennrothenberg.com",nocase; classtype:attempted-recon; sid:200004294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glidonmitcodasur.tk",nocase; classtype:attempted-recon; sid:200004295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"globalpatron.com",nocase; classtype:attempted-recon; sid:200004296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"globalpitch.com",nocase; classtype:attempted-recon; sid:200004297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"globovidrosss.blogspot.com",nocase; classtype:attempted-recon; sid:200004298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glogo.org",nocase; classtype:attempted-recon; sid:200004299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"glsword.com",nocase; classtype:attempted-recon; sid:200004300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gmailposteingangi.de",nocase; classtype:attempted-recon; sid:200004301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gmcpharma.site.aplus.net",nocase; classtype:attempted-recon; sid:200004302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gmgroupllc.co",nocase; classtype:attempted-recon; sid:200004303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gmit.edu.in",nocase; classtype:attempted-recon; sid:200004304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gmlmusic.com",nocase; classtype:attempted-recon; sid:200004305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gmxaktuualisieren.yolasite.com",nocase; classtype:attempted-recon; sid:200004306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go24link.com",nocase; classtype:attempted-recon; sid:200004307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goldwin.incode.jp",nocase; classtype:attempted-recon; sid:200004308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gomlekistanbul.mbs.ist",nocase; classtype:attempted-recon; sid:200004309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gonzaleztransformacion.com.mx",nocase; classtype:attempted-recon; sid:200004310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"good12345.tripod.com",nocase; classtype:attempted-recon; sid:200004311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goodnewview.com",nocase; classtype:attempted-recon; sid:200004312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goolear.amicale-portal.fr",nocase; classtype:attempted-recon; sid:200004313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gooo.to",nocase; classtype:attempted-recon; sid:200004314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gordybuildinggroup.com",nocase; classtype:attempted-recon; sid:200004315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gotemailupdate.web.app",nocase; classtype:attempted-recon; sid:200004316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goudmann.me",nocase; classtype:attempted-recon; sid:200004317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gpcarautocenter-web-sand-home.blogspot.com",nocase; classtype:attempted-recon; sid:200004318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"granitebayallergy.com",nocase; classtype:attempted-recon; sid:200004319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"graphic-boulder-301015.web.app",nocase; classtype:attempted-recon; sid:200004320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gray-digital.cn",nocase; classtype:attempted-recon; sid:200004321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"graydovesgrace.com",nocase; classtype:attempted-recon; sid:200004322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"greaterncunow.dray-dns.de",nocase; classtype:attempted-recon; sid:200004323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"greenland.co.mz",nocase; classtype:attempted-recon; sid:200004324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"greenvonline.com",nocase; classtype:attempted-recon; sid:200004325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"greenwayweb.com",nocase; classtype:attempted-recon; sid:200004326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"griprese.gq",nocase; classtype:attempted-recon; sid:200004327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"groupesuseg.com.br",nocase; classtype:attempted-recon; sid:200004328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grove-5bd0a.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grove-5bd0a.web.app",nocase; classtype:attempted-recon; sid:200004330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupodetrabajo.hostfree.pw",nocase; classtype:attempted-recon; sid:200004331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupoelectorial.hostfree.pw",nocase; classtype:attempted-recon; sid:200004332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupoexitopaya.hostfree.pw",nocase; classtype:attempted-recon; sid:200004333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupofacebookpremios2022.filesusr.com",nocase; classtype:attempted-recon; sid:200004334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupofsp.com.br",nocase; classtype:attempted-recon; sid:200004335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grupoosinez.hostfree.pw",nocase; classtype:attempted-recon; sid:200004336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"grusha-studio.com",nocase; classtype:attempted-recon; sid:200004337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gskjmob.top",nocase; classtype:attempted-recon; sid:200004338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gsmunlockserver.com",nocase; classtype:attempted-recon; sid:200004339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gtecnologica.com",nocase; classtype:attempted-recon; sid:200004340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gtigrovvs.com",nocase; classtype:attempted-recon; sid:200004341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gtjhtg.lfiogoe.cn",nocase; classtype:attempted-recon; sid:200004342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gtyaner.com",nocase; classtype:attempted-recon; sid:200004343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"guiocloud.web.app",nocase; classtype:attempted-recon; sid:200004344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gulzarfoods.com",nocase; classtype:attempted-recon; sid:200004345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"guprosselecto.hostfree.pw",nocase; classtype:attempted-recon; sid:200004346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gurukanth.com",nocase; classtype:attempted-recon; sid:200004347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gvdjsqwjwg.duckdns.org",nocase; classtype:attempted-recon; sid:200004348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gxa1ij.webwave.dev",nocase; classtype:attempted-recon; sid:200004349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.asxpfj.com",nocase; classtype:attempted-recon; sid:200004350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.b2bxjea.com",nocase; classtype:attempted-recon; sid:200004351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.beupwyj.top",nocase; classtype:attempted-recon; sid:200004352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.biupqoc.com",nocase; classtype:attempted-recon; sid:200004353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.bkwsfdc.top",nocase; classtype:attempted-recon; sid:200004354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.bluoqas.top",nocase; classtype:attempted-recon; sid:200004355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.calxwbo.top",nocase; classtype:attempted-recon; sid:200004356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.coinbaive.com",nocase; classtype:attempted-recon; sid:200004357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.coindealhov.net",nocase; classtype:attempted-recon; sid:200004358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.cpqyjxi.top",nocase; classtype:attempted-recon; sid:200004359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.croknqp.top",nocase; classtype:attempted-recon; sid:200004360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.cwghjv.com",nocase; classtype:attempted-recon; sid:200004361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.dozwhsi.top",nocase; classtype:attempted-recon; sid:200004362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.ebovyqt.top",nocase; classtype:attempted-recon; sid:200004363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.ephzbuo.top",nocase; classtype:attempted-recon; sid:200004364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.eskcxwr.top",nocase; classtype:attempted-recon; sid:200004365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.eurexsih.com",nocase; classtype:attempted-recon; sid:200004366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.eurexvky.cc",nocase; classtype:attempted-recon; sid:200004367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.fhpyszo.top",nocase; classtype:attempted-recon; sid:200004368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.fxzqpgl.top",nocase; classtype:attempted-recon; sid:200004369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gaqnvzx.top",nocase; classtype:attempted-recon; sid:200004370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun10280.top",nocase; classtype:attempted-recon; sid:200004371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun18732.top",nocase; classtype:attempted-recon; sid:200004372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun18876.top",nocase; classtype:attempted-recon; sid:200004373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun36119.top",nocase; classtype:attempted-recon; sid:200004374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun37352.top",nocase; classtype:attempted-recon; sid:200004375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun50399.top",nocase; classtype:attempted-recon; sid:200004376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun58122.top",nocase; classtype:attempted-recon; sid:200004377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun68299.top",nocase; classtype:attempted-recon; sid:200004378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun73680.top",nocase; classtype:attempted-recon; sid:200004379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun79595.top",nocase; classtype:attempted-recon; sid:200004380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun80385.top",nocase; classtype:attempted-recon; sid:200004381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gefun93676.top",nocase; classtype:attempted-recon; sid:200004382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.geuokwj.top",nocase; classtype:attempted-recon; sid:200004383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.gobsaym.top",nocase; classtype:attempted-recon; sid:200004384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.hbraklv.top",nocase; classtype:attempted-recon; sid:200004385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.hifly57326.top",nocase; classtype:attempted-recon; sid:200004386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.hiflyk28075.top",nocase; classtype:attempted-recon; sid:200004387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.hiflyk28306.xyz",nocase; classtype:attempted-recon; sid:200004388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.hsnhc321.top",nocase; classtype:attempted-recon; sid:200004389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.hzln019.top",nocase; classtype:attempted-recon; sid:200004390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.icsdymv.top",nocase; classtype:attempted-recon; sid:200004391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.ipdafje.top",nocase; classtype:attempted-recon; sid:200004392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.iutsnap.top",nocase; classtype:attempted-recon; sid:200004393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.jgynohq.top",nocase; classtype:attempted-recon; sid:200004394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.jhafrwo.top",nocase; classtype:attempted-recon; sid:200004395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.jhfurxw.top",nocase; classtype:attempted-recon; sid:200004396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.jkozclh.top",nocase; classtype:attempted-recon; sid:200004397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.kcyguxz.top",nocase; classtype:attempted-recon; sid:200004398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.kgoumav.top",nocase; classtype:attempted-recon; sid:200004399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.kiqhuxf.top",nocase; classtype:attempted-recon; sid:200004400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.kpdwpl785.top",nocase; classtype:attempted-recon; sid:200004401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.ktcugbx.top",nocase; classtype:attempted-recon; sid:200004402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.lhusrjo.top",nocase; classtype:attempted-recon; sid:200004403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.lkhobue.top",nocase; classtype:attempted-recon; sid:200004404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.lqezvpd.top",nocase; classtype:attempted-recon; sid:200004405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.lyoikpt.top",nocase; classtype:attempted-recon; sid:200004406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.mghosdc.top",nocase; classtype:attempted-recon; sid:200004407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.mhevtwo.top",nocase; classtype:attempted-recon; sid:200004408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.miaycel.top",nocase; classtype:attempted-recon; sid:200004409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.msjgiht.top",nocase; classtype:attempted-recon; sid:200004410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.mtoyfai.top",nocase; classtype:attempted-recon; sid:200004411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.mwybeat.top",nocase; classtype:attempted-recon; sid:200004412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.nbustyr.top",nocase; classtype:attempted-recon; sid:200004413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.ncgbdyt.top",nocase; classtype:attempted-recon; sid:200004414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.noeikxc.top",nocase; classtype:attempted-recon; sid:200004415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.npsltvr.top",nocase; classtype:attempted-recon; sid:200004416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.ntmml5ca.xyz",nocase; classtype:attempted-recon; sid:200004417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.nuvdzkb.top",nocase; classtype:attempted-recon; sid:200004418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.pqkvoig.top",nocase; classtype:attempted-recon; sid:200004419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.qgjtvrn.top",nocase; classtype:attempted-recon; sid:200004420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.qtradesda.cc",nocase; classtype:attempted-recon; sid:200004421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.qumrvdi.top",nocase; classtype:attempted-recon; sid:200004422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.rstawxp.top",nocase; classtype:attempted-recon; sid:200004423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.rtgbcnq.top",nocase; classtype:attempted-recon; sid:200004424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.smolncx.top",nocase; classtype:attempted-recon; sid:200004425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.somahty.top",nocase; classtype:attempted-recon; sid:200004426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.srpgyuc.top",nocase; classtype:attempted-recon; sid:200004427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.styxpzn.top",nocase; classtype:attempted-recon; sid:200004428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.talpowb.top",nocase; classtype:attempted-recon; sid:200004429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.tdezwyo.top",nocase; classtype:attempted-recon; sid:200004430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.tmaeqcr.top",nocase; classtype:attempted-recon; sid:200004431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.tmhyivp.top",nocase; classtype:attempted-recon; sid:200004432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.tqedvcx.top",nocase; classtype:attempted-recon; sid:200004433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.unjadfl.top",nocase; classtype:attempted-recon; sid:200004434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.unmwzjg.top",nocase; classtype:attempted-recon; sid:200004435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.uoblvcy.top",nocase; classtype:attempted-recon; sid:200004436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.upjcxaq.top",nocase; classtype:attempted-recon; sid:200004437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.vdkhbfm.top",nocase; classtype:attempted-recon; sid:200004438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.voktbhy.top",nocase; classtype:attempted-recon; sid:200004439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.wcfdzgt.top",nocase; classtype:attempted-recon; sid:200004440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.wpasoir.top",nocase; classtype:attempted-recon; sid:200004441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.wqfxkil.top",nocase; classtype:attempted-recon; sid:200004442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.xgcikoz.top",nocase; classtype:attempted-recon; sid:200004443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.xrbpvdg.top",nocase; classtype:attempted-recon; sid:200004444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.xugetjw.top",nocase; classtype:attempted-recon; sid:200004445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.xwnrpmg.top",nocase; classtype:attempted-recon; sid:200004446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.ympagxb.top",nocase; classtype:attempted-recon; sid:200004447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.ynbsvhz.top",nocase; classtype:attempted-recon; sid:200004448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.zpefnlr.top",nocase; classtype:attempted-recon; sid:200004449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"h5.zxgiqvb.top",nocase; classtype:attempted-recon; sid:200004450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"habbocreditosparati.blogspot.com",nocase; classtype:attempted-recon; sid:200004451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"habeshasteel.com",nocase; classtype:attempted-recon; sid:200004452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"habi10100200.liveblog365.com",nocase; classtype:attempted-recon; sid:200004453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hahdaeupdate.es.tl",nocase; classtype:attempted-recon; sid:200004454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hakbukmarch22.ml",nocase; classtype:attempted-recon; sid:200004455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"halaman.zyrosite.com",nocase; classtype:attempted-recon; sid:200004456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"halibotton.in",nocase; classtype:attempted-recon; sid:200004457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hallden.se",nocase; classtype:attempted-recon; sid:200004458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"handakai.github.io",nocase; classtype:attempted-recon; sid:200004459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"handcepi.tk",nocase; classtype:attempted-recon; sid:200004460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"handvina.com",nocase; classtype:attempted-recon; sid:200004461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hangovertest1.blogspot.com",nocase; classtype:attempted-recon; sid:200004462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hanguxcl.com",nocase; classtype:attempted-recon; sid:200004463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hans-ledlite.com",nocase; classtype:attempted-recon; sid:200004464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"haojue.com.br",nocase; classtype:attempted-recon; sid:200004465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"haroldhazard1-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200004466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"haunlimited.org",nocase; classtype:attempted-recon; sid:200004467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"havas.fr",nocase; classtype:attempted-recon; sid:200004468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"havasgroup.com.au",nocase; classtype:attempted-recon; sid:200004469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hayaindia.com",nocase; classtype:attempted-recon; sid:200004470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hbfvc.leqkmbt.cn",nocase; classtype:attempted-recon; sid:200004471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hdrive173524723527.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200004472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"healthatlums.web.app",nocase; classtype:attempted-recon; sid:200004473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hebammeannemerkle.de",nocase; classtype:attempted-recon; sid:200004474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hechoparati.hostfree.pw",nocase; classtype:attempted-recon; sid:200004475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hechosoloparati.byethost3.com",nocase; classtype:attempted-recon; sid:200004476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hedefpanel.net",nocase; classtype:attempted-recon; sid:200004477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hedrg.superpie.cn",nocase; classtype:attempted-recon; sid:200004478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"heif.lovestoblog.com",nocase; classtype:attempted-recon; sid:200004479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"heinthu1.github.io",nocase; classtype:attempted-recon; sid:200004480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hellenic-postbank.com",nocase; classtype:attempted-recon; sid:200004481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help-community-standart-and-page-repair-service.cf",nocase; classtype:attempted-recon; sid:200004482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help-community-standart-and-page-repair-service.ga",nocase; classtype:attempted-recon; sid:200004483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help-community-standart-and-page-repair-service.gq",nocase; classtype:attempted-recon; sid:200004484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help-community-standart-and-page-repair-service.ml",nocase; classtype:attempted-recon; sid:200004485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help-community-standart-and-page-repair-service.tk",nocase; classtype:attempted-recon; sid:200004486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help-delivrypackge.ml",nocase; classtype:attempted-recon; sid:200004487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help-vystarcu.com",nocase; classtype:attempted-recon; sid:200004488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help.insecur.saftyalert.workers.dev",nocase; classtype:attempted-recon; sid:200004489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"help.validation-page.workers.dev",nocase; classtype:attempted-recon; sid:200004490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"helpdeskatt.co.vu",nocase; classtype:attempted-recon; sid:200004491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hempsolutionstoday.com",nocase; classtype:attempted-recon; sid:200004492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hendaklahengkau.martulangsore.workers.dev",nocase; classtype:attempted-recon; sid:200004493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"henpakhbg.weebly.com",nocase; classtype:attempted-recon; sid:200004494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"herbpersons.com",nocase; classtype:attempted-recon; sid:200004495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hervochapiteaux.blogspot.com",nocase; classtype:attempted-recon; sid:200004496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hesrf.ykmhkhk.cn",nocase; classtype:attempted-recon; sid:200004497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hex-dao.app",nocase; classtype:attempted-recon; sid:200004498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"heyuanyc.com",nocase; classtype:attempted-recon; sid:200004499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdcvx.80uona4.cn",nocase; classtype:attempted-recon; sid:200004500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfdj.pevcjko.cn",nocase; classtype:attempted-recon; sid:200004501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgcx.aiwzqnb.cn",nocase; classtype:attempted-recon; sid:200004502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgcxd.kjfkbrv.cn",nocase; classtype:attempted-recon; sid:200004503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdc.oaflmyf.cn",nocase; classtype:attempted-recon; sid:200004504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdcd.fuxffel.cn",nocase; classtype:attempted-recon; sid:200004505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgdvc.foctcmx.cn",nocase; classtype:attempted-recon; sid:200004506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfgfd.rplxlav.cn",nocase; classtype:attempted-recon; sid:200004507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfili.org",nocase; classtype:attempted-recon; sid:200004508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hfj.bqdljhu.cn",nocase; classtype:attempted-recon; sid:200004509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hg5566dh.com",nocase; classtype:attempted-recon; sid:200004510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgcvz.hpmiuz.cn",nocase; classtype:attempted-recon; sid:200004511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgdeuheijklw.weebly.com",nocase; classtype:attempted-recon; sid:200004512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgdhgfgghdfhg.weebly.com",nocase; classtype:attempted-recon; sid:200004513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfcx.aqxqrlb.cn",nocase; classtype:attempted-recon; sid:200004514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgfds.smtqwzm.cn",nocase; classtype:attempted-recon; sid:200004515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hggsfkdvxy1.web.app",nocase; classtype:attempted-recon; sid:200004516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hghjhkjjgg.vfgjkkhglkl.workers.dev",nocase; classtype:attempted-recon; sid:200004517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hgjfk.mcoffcu.cn",nocase; classtype:attempted-recon; sid:200004518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs1.web.app",nocase; classtype:attempted-recon; sid:200004520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs10.web.app",nocase; classtype:attempted-recon; sid:200004522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs11.web.app",nocase; classtype:attempted-recon; sid:200004524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs2.web.app",nocase; classtype:attempted-recon; sid:200004526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs3.web.app",nocase; classtype:attempted-recon; sid:200004528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs4.web.app",nocase; classtype:attempted-recon; sid:200004530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs5.web.app",nocase; classtype:attempted-recon; sid:200004532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs6.web.app",nocase; classtype:attempted-recon; sid:200004534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs7.web.app",nocase; classtype:attempted-recon; sid:200004536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs8.web.app",nocase; classtype:attempted-recon; sid:200004538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiahhfghjrjehs9.web.app",nocase; classtype:attempted-recon; sid:200004540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hidden-mud-9b49.offiice.workers.dev",nocase; classtype:attempted-recon; sid:200004541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly01569.top",nocase; classtype:attempted-recon; sid:200004542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly10365.top",nocase; classtype:attempted-recon; sid:200004543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly21173.top",nocase; classtype:attempted-recon; sid:200004544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly27702.top",nocase; classtype:attempted-recon; sid:200004545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly38283.top",nocase; classtype:attempted-recon; sid:200004546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly57326.top",nocase; classtype:attempted-recon; sid:200004547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly62556.top",nocase; classtype:attempted-recon; sid:200004548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly73892.top",nocase; classtype:attempted-recon; sid:200004549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly85086.top",nocase; classtype:attempted-recon; sid:200004550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly85295.top",nocase; classtype:attempted-recon; sid:200004551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly90627.top",nocase; classtype:attempted-recon; sid:200004552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hifly96975.top",nocase; classtype:attempted-recon; sid:200004553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiflyk27793.top",nocase; classtype:attempted-recon; sid:200004554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiflyk47344.top",nocase; classtype:attempted-recon; sid:200004555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiflyk66656.top",nocase; classtype:attempted-recon; sid:200004556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiflyk70213.top",nocase; classtype:attempted-recon; sid:200004557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"himalayansherpa.com.au",nocase; classtype:attempted-recon; sid:200004558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"himanshu.sikka.ultramedicinadiagnostica.com.br",nocase; classtype:attempted-recon; sid:200004559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"himbauane.blogspot.com",nocase; classtype:attempted-recon; sid:200004560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"himtecnologia.com",nocase; classtype:attempted-recon; sid:200004561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hingehealths.com",nocase; classtype:attempted-recon; sid:200004562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hiperconsultamaio.com",nocase; classtype:attempted-recon; sid:200004563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hipersexta2m.com",nocase; classtype:attempted-recon; sid:200004564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hisoftsxwnf.web.app",nocase; classtype:attempted-recon; sid:200004565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview1.web.app",nocase; classtype:attempted-recon; sid:200004567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview10.web.app",nocase; classtype:attempted-recon; sid:200004569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview11.web.app",nocase; classtype:attempted-recon; sid:200004571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview12.web.app",nocase; classtype:attempted-recon; sid:200004573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview13.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview13.web.app",nocase; classtype:attempted-recon; sid:200004575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview14.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview14.web.app",nocase; classtype:attempted-recon; sid:200004577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview15.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview15.web.app",nocase; classtype:attempted-recon; sid:200004579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview16.web.app",nocase; classtype:attempted-recon; sid:200004581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview17.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview17.web.app",nocase; classtype:attempted-recon; sid:200004583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview18.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview18.web.app",nocase; classtype:attempted-recon; sid:200004585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview19.web.app",nocase; classtype:attempted-recon; sid:200004587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview2.web.app",nocase; classtype:attempted-recon; sid:200004589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview20.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview20.web.app",nocase; classtype:attempted-recon; sid:200004591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview21.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview21.web.app",nocase; classtype:attempted-recon; sid:200004593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview22.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview22.web.app",nocase; classtype:attempted-recon; sid:200004595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview23.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview23.web.app",nocase; classtype:attempted-recon; sid:200004597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview24.web.app",nocase; classtype:attempted-recon; sid:200004599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview25.web.app",nocase; classtype:attempted-recon; sid:200004601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview26.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview26.web.app",nocase; classtype:attempted-recon; sid:200004603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview27.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview27.web.app",nocase; classtype:attempted-recon; sid:200004605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview28.web.app",nocase; classtype:attempted-recon; sid:200004607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview29.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview29.web.app",nocase; classtype:attempted-recon; sid:200004609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview3.web.app",nocase; classtype:attempted-recon; sid:200004611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview30.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview30.web.app",nocase; classtype:attempted-recon; sid:200004613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview4.web.app",nocase; classtype:attempted-recon; sid:200004615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview5.web.app",nocase; classtype:attempted-recon; sid:200004617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview6.web.app",nocase; classtype:attempted-recon; sid:200004619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview7.web.app",nocase; classtype:attempted-recon; sid:200004621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview8.web.app",nocase; classtype:attempted-recon; sid:200004623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview9.web.app",nocase; classtype:attempted-recon; sid:200004625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitman71hd-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200004626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmarch22.ml",nocase; classtype:attempted-recon; sid:200004627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hivellez.cloudaccess.host",nocase; classtype:attempted-recon; sid:200004628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hj52rs.hyperphp.com",nocase; classtype:attempted-recon; sid:200004629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgbv.kavhulz.cn",nocase; classtype:attempted-recon; sid:200004630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgc.aysellj.cn",nocase; classtype:attempted-recon; sid:200004631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgc.dmeorxt.cn",nocase; classtype:attempted-recon; sid:200004632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgc.szofndb.cn",nocase; classtype:attempted-recon; sid:200004633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjfgcv.amrkzpi.cn",nocase; classtype:attempted-recon; sid:200004634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjhjhgjkhjk.vfgjkkhglkl.workers.dev",nocase; classtype:attempted-recon; sid:200004635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjrged.lyvvkrd.cn",nocase; classtype:attempted-recon; sid:200004636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hjy87hjy87.hyperphp.com",nocase; classtype:attempted-recon; sid:200004637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hlsoatxphh.duckdns.org",nocase; classtype:attempted-recon; sid:200004638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hmgh.yibzdid.cn",nocase; classtype:attempted-recon; sid:200004639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hmhgnb.tmfgsyy.cn",nocase; classtype:attempted-recon; sid:200004640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hmmm84.godaddysites.com",nocase; classtype:attempted-recon; sid:200004641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hngfbd.kpuwgvi.cn",nocase; classtype:attempted-recon; sid:200004642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hohcloudserver.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hohcloudserver.web.app",nocase; classtype:attempted-recon; sid:200004644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoje-registro-solucoes.com",nocase; classtype:attempted-recon; sid:200004645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoje-temos-solucoes.com",nocase; classtype:attempted-recon; sid:200004646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hojeciais.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200004647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hokihokian.com",nocase; classtype:attempted-recon; sid:200004648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"holozhet-host.preview-domain.com",nocase; classtype:attempted-recon; sid:200004649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"holyfamilycollegetly.in",nocase; classtype:attempted-recon; sid:200004650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"home-zimb.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homeoffice365login.myportfolio.com",nocase; classtype:attempted-recon; sid:200004652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homepage-login.com",nocase; classtype:attempted-recon; sid:200004653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"homescute.com",nocase; classtype:attempted-recon; sid:200004654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"honestpilgrim.com",nocase; classtype:attempted-recon; sid:200004655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd1.web.app",nocase; classtype:attempted-recon; sid:200004657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd10.web.app",nocase; classtype:attempted-recon; sid:200004659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd11.web.app",nocase; classtype:attempted-recon; sid:200004661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd12.web.app",nocase; classtype:attempted-recon; sid:200004663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd13.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd13.web.app",nocase; classtype:attempted-recon; sid:200004665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd14.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd14.web.app",nocase; classtype:attempted-recon; sid:200004667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd17.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd17.web.app",nocase; classtype:attempted-recon; sid:200004669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd18.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd18.web.app",nocase; classtype:attempted-recon; sid:200004671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd19.web.app",nocase; classtype:attempted-recon; sid:200004673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd2.web.app",nocase; classtype:attempted-recon; sid:200004675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd20.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd20.web.app",nocase; classtype:attempted-recon; sid:200004677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd21.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd21.web.app",nocase; classtype:attempted-recon; sid:200004679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd24.web.app",nocase; classtype:attempted-recon; sid:200004681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd25.web.app",nocase; classtype:attempted-recon; sid:200004683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd3.web.app",nocase; classtype:attempted-recon; sid:200004685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd4.web.app",nocase; classtype:attempted-recon; sid:200004687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd5.web.app",nocase; classtype:attempted-recon; sid:200004689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd6.web.app",nocase; classtype:attempted-recon; sid:200004691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd7.web.app",nocase; classtype:attempted-recon; sid:200004693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd8.web.app",nocase; classtype:attempted-recon; sid:200004695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoshahfd9.web.app",nocase; classtype:attempted-recon; sid:200004697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hostnix.net",nocase; classtype:attempted-recon; sid:200004698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotel-pontos.gr",nocase; classtype:attempted-recon; sid:200004699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hoteltycoonsimulator.com",nocase; classtype:attempted-recon; sid:200004700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hotshoot2022.com",nocase; classtype:attempted-recon; sid:200004701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hounbvc-c7661.web.app",nocase; classtype:attempted-recon; sid:200004702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"house18.info",nocase; classtype:attempted-recon; sid:200004703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"housebase.hercobuly.biz",nocase; classtype:attempted-recon; sid:200004704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"houseofscotland.com.au",nocase; classtype:attempted-recon; sid:200004705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hpplotters.in",nocase; classtype:attempted-recon; sid:200004706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hrfg.gtytljl.cn",nocase; classtype:attempted-recon; sid:200004707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hrxvgn.com",nocase; classtype:attempted-recon; sid:200004708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hsk99e.hyperphp.com",nocase; classtype:attempted-recon; sid:200004709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hsxecjtqeepzpbge-dot-actis-armuim-raddic-alocks.ue.r.appspot.com",nocase; classtype:attempted-recon; sid:200004710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"htgeds.xnmrnsc.cn",nocase; classtype:attempted-recon; sid:200004711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hththv.weebly.com",nocase; classtype:attempted-recon; sid:200004712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"htir.co.in",nocase; classtype:attempted-recon; sid:200004713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"httpeugnerally-wixsite-com.filesusr.com",nocase; classtype:attempted-recon; sid:200004714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"https--mail-validate--corn.glitch.me",nocase; classtype:attempted-recon; sid:200004715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"httpsastwebnet-it-mail-index-rui-jsp-v-mail.weebly.com",nocase; classtype:attempted-recon; sid:200004716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"htttpttprackspacecom.weebly.com",nocase; classtype:attempted-recon; sid:200004717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"htws.wtvthuh.cn",nocase; classtype:attempted-recon; sid:200004718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huangxc.com",nocase; classtype:attempted-recon; sid:200004719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hulu-com-activate.sitey.me",nocase; classtype:attempted-recon; sid:200004720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hulu-hulu-com-activate.sitey.me",nocase; classtype:attempted-recon; sid:200004721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hulu.sitey.me",nocase; classtype:attempted-recon; sid:200004722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huntandgo.com",nocase; classtype:attempted-recon; sid:200004723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huntingtonsecurelog.hopto.org",nocase; classtype:attempted-recon; sid:200004724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"husiwei8.top",nocase; classtype:attempted-recon; sid:200004725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hutmailcloud.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hutmailcloud.web.app",nocase; classtype:attempted-recon; sid:200004727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hutoknepper.de",nocase; classtype:attempted-recon; sid:200004728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huyfdk.co.jp.zewjb.top",nocase; classtype:attempted-recon; sid:200004729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"huynguyen2k.github.io",nocase; classtype:attempted-recon; sid:200004730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hwfo24295.xyz",nocase; classtype:attempted-recon; sid:200004731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hwweb-2e03celogin0-mai1l.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hwweb-2e03celogin0-mai1l.web.app",nocase; classtype:attempted-recon; sid:200004733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hxexowqlda.duckdns.org",nocase; classtype:attempted-recon; sid:200004734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hybridfiberopticcables.com",nocase; classtype:attempted-recon; sid:200004735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hydconsgu.tk",nocase; classtype:attempted-recon; sid:200004736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hygfdr.hxztzqz.cn",nocase; classtype:attempted-recon; sid:200004737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hzln019.top",nocase; classtype:attempted-recon; sid:200004738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i-ask332.dga.jp",nocase; classtype:attempted-recon; sid:200004739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i.violationspage.validationspege.workers.dev",nocase; classtype:attempted-recon; sid:200004740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ibpm.ru",nocase; classtype:attempted-recon; sid:200004741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ibraibraa170.42web.io",nocase; classtype:attempted-recon; sid:200004742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iccs-bpo.com",nocase; classtype:attempted-recon; sid:200004743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iccu-a.web.app",nocase; classtype:attempted-recon; sid:200004744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"icoinsmart.com",nocase; classtype:attempted-recon; sid:200004745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ics-service.ddns.net",nocase; classtype:attempted-recon; sid:200004746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"icsconsultant.net",nocase; classtype:attempted-recon; sid:200004747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ictday.gov.np",nocase; classtype:attempted-recon; sid:200004748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"id-000064updatenow.weebly.com",nocase; classtype:attempted-recon; sid:200004749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"id-64300000-updatenow.weebly.com",nocase; classtype:attempted-recon; sid:200004750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"idcyqexpfs.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"idcyqexpfs.web.app",nocase; classtype:attempted-recon; sid:200004752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"idobeamolax.com",nocase; classtype:attempted-recon; sid:200004753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"idoow.net",nocase; classtype:attempted-recon; sid:200004754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"if8o.online",nocase; classtype:attempted-recon; sid:200004755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifibybo.cluster028.hosting.ovh.net",nocase; classtype:attempted-recon; sid:200004756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iframejld.avent-media.fr",nocase; classtype:attempted-recon; sid:200004757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd1.web.app",nocase; classtype:attempted-recon; sid:200004759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd10.web.app",nocase; classtype:attempted-recon; sid:200004761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd11.web.app",nocase; classtype:attempted-recon; sid:200004763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd12.web.app",nocase; classtype:attempted-recon; sid:200004765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd13.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd13.web.app",nocase; classtype:attempted-recon; sid:200004767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd14.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd14.web.app",nocase; classtype:attempted-recon; sid:200004769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd15.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd15.web.app",nocase; classtype:attempted-recon; sid:200004771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd16.web.app",nocase; classtype:attempted-recon; sid:200004773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd17.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd17.web.app",nocase; classtype:attempted-recon; sid:200004775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd18.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd18.web.app",nocase; classtype:attempted-recon; sid:200004777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd2.web.app",nocase; classtype:attempted-recon; sid:200004779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd21.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd21.web.app",nocase; classtype:attempted-recon; sid:200004781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd22.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd22.web.app",nocase; classtype:attempted-recon; sid:200004783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd23.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd23.web.app",nocase; classtype:attempted-recon; sid:200004785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd24.web.app",nocase; classtype:attempted-recon; sid:200004787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd25.web.app",nocase; classtype:attempted-recon; sid:200004789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd3.web.app",nocase; classtype:attempted-recon; sid:200004791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd4.web.app",nocase; classtype:attempted-recon; sid:200004793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd5.web.app",nocase; classtype:attempted-recon; sid:200004795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd6.web.app",nocase; classtype:attempted-recon; sid:200004797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd7.web.app",nocase; classtype:attempted-recon; sid:200004799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd8.web.app",nocase; classtype:attempted-recon; sid:200004801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200004802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifunsjd9.web.app",nocase; classtype:attempted-recon; sid:200004803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"igotinnovative.com",nocase; classtype:attempted-recon; sid:200004804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"igsolthermsolar.blogspot.com",nocase; classtype:attempted-recon; sid:200004805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd1.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd1.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd10.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd10.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd11.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd11.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd12.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd12.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd13.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd13.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd15.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd15.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd16.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd16.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd17.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd17.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd19.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd19.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd20.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd20.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd22.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd22.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd23.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd23.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd3.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd3.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd4.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd4.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd5.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd5.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd6.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd6.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd7.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd7.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd8.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd8.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd9.firebaseapp.com#a@b.com",nocase; classtype:attempted-recon; sid:200004842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ihahdgdjd9.web.app#a@b.com",nocase; classtype:attempted-recon; sid:200004843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ii6va-fqaaa-aaaad-qcv3q-cai.ic0.app",nocase; classtype:attempted-recon; sid:200004844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iicconsulting.com",nocase; classtype:attempted-recon; sid:200004845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iinviicto-02830982.azurewebsites.net",nocase; classtype:attempted-recon; sid:200004846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ijnqvwt.top",nocase; classtype:attempted-recon; sid:200004847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ikko-pkobp.com",nocase; classtype:attempted-recon; sid:200004848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iko-secure.com",nocase; classtype:attempted-recon; sid:200004849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imb.manantialdebendicion.com",nocase; classtype:attempted-recon; sid:200004850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imitoken.club",nocase; classtype:attempted-recon; sid:200004851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imobiliaria-cardinali-com-br.blogspot.com",nocase; classtype:attempted-recon; sid:200004852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"importvalidator.org",nocase; classtype:attempted-recon; sid:200004853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"impotsgouv-france.com",nocase; classtype:attempted-recon; sid:200004854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imtokenmart.com",nocase; classtype:attempted-recon; sid:200004855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inc01fsecurejp.com",nocase; classtype:attempted-recon; sid:200004856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inc02asecurejp.com",nocase; classtype:attempted-recon; sid:200004857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inc02fsecurejp.com",nocase; classtype:attempted-recon; sid:200004858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inc7f-securejp.com",nocase; classtype:attempted-recon; sid:200004859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inchirieri-limuzinebucuresti.ro",nocase; classtype:attempted-recon; sid:200004860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"incode.jp",nocase; classtype:attempted-recon; sid:200004861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"incoming-fax-document.myportfolio.com",nocase; classtype:attempted-recon; sid:200004862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indexdapprectifier.netlify.app",nocase; classtype:attempted-recon; sid:200004863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indianajons.com",nocase; classtype:attempted-recon; sid:200004864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"indigoswap.io",nocase; classtype:attempted-recon; sid:200004865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inflixty.rf.gd",nocase; classtype:attempted-recon; sid:200004866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info-helpref.web.id",nocase; classtype:attempted-recon; sid:200004867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info.dnb.no",nocase; classtype:attempted-recon; sid:200004868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info.hr-metal.com.cn",nocase; classtype:attempted-recon; sid:200004869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"info85.godaddysites.com",nocase; classtype:attempted-recon; sid:200004870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informations.recovery.confiryourpage.workers.dev",nocase; classtype:attempted-recon; sid:200004871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"informationtaxcase.page.link",nocase; classtype:attempted-recon; sid:200004872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"infos-novobanco.com",nocase; classtype:attempted-recon; sid:200004873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ingaveiculos.creatorlink.net",nocase; classtype:attempted-recon; sid:200004874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inggrestuya365.hostfree.pw",nocase; classtype:attempted-recon; sid:200004875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ingreestuyaa1463.hostfree.pw",nocase; classtype:attempted-recon; sid:200004876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ingreestuyaa212s.hostfree.pw",nocase; classtype:attempted-recon; sid:200004877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ingreestuyaa2213.hostfree.pw",nocase; classtype:attempted-recon; sid:200004878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inmobiliariaalfa.cl",nocase; classtype:attempted-recon; sid:200004879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"innovation-evotik.web.app",nocase; classtype:attempted-recon; sid:200004880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"innovative-talented-monitor.glitch.me",nocase; classtype:attempted-recon; sid:200004881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inpost-pl-zai.accept8145.me",nocase; classtype:attempted-recon; sid:200004882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inpost-rghl.2584902.me",nocase; classtype:attempted-recon; sid:200004883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inpost.uwsmoe.org",nocase; classtype:attempted-recon; sid:200004884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inps-ep.com",nocase; classtype:attempted-recon; sid:200004885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inshmarch2022.ml",nocase; classtype:attempted-recon; sid:200004886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"insoti.co",nocase; classtype:attempted-recon; sid:200004887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"instagramusernamelogin.netlify.app",nocase; classtype:attempted-recon; sid:200004888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"instant-meta-mask-active-nelify.live",nocase; classtype:attempted-recon; sid:200004889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"int3eractivebrokers.com",nocase; classtype:attempted-recon; sid:200004890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interactivebrokers-invest.com",nocase; classtype:attempted-recon; sid:200004891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interactivebrokersx.com",nocase; classtype:attempted-recon; sid:200004892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interactivebrokrers.com",nocase; classtype:attempted-recon; sid:200004893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interactivebrolkers.com",nocase; classtype:attempted-recon; sid:200004894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interadtivebrokers.com",nocase; classtype:attempted-recon; sid:200004895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbank-ingresa.web.app",nocase; classtype:attempted-recon; sid:200004896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbank-personas.web.app",nocase; classtype:attempted-recon; sid:200004897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbank-peru.web.app",nocase; classtype:attempted-recon; sid:200004898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbankempresahomeweb.gemsaweb.com",nocase; classtype:attempted-recon; sid:200004899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interbranks.prepa55.mx",nocase; classtype:attempted-recon; sid:200004900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"international-c.hostfree.pw",nocase; classtype:attempted-recon; sid:200004901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"internationaldealscompany.com",nocase; classtype:attempted-recon; sid:200004902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"interspar.at",nocase; classtype:attempted-recon; sid:200004903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"invoicing.18thtechnology.com",nocase; classtype:attempted-recon; sid:200004904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iojkglk2kfda.shop",nocase; classtype:attempted-recon; sid:200004905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionos-mein.webmail.de.flick-fix.de",nocase; classtype:attempted-recon; sid:200004906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionos.com.kz",nocase; classtype:attempted-recon; sid:200004907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionos.com.ng",nocase; classtype:attempted-recon; sid:200004908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionos.zimapp.workers.dev",nocase; classtype:attempted-recon; sid:200004909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ionroyazz.hyperphp.com",nocase; classtype:attempted-recon; sid:200004910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ip-72-167-45-95.ip.secureserver.net",nocase; classtype:attempted-recon; sid:200004911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ip-92-205-18-61.ip.secureserver.net",nocase; classtype:attempted-recon; sid:200004912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipixacademy.com",nocase; classtype:attempted-recon; sid:200004913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iplogger.info",nocase; classtype:attempted-recon; sid:200004914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ips-ac.in",nocase; classtype:attempted-recon; sid:200004915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipvpn055172.netvigator.com",nocase; classtype:attempted-recon; sid:200004916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iran-viking.info",nocase; classtype:attempted-recon; sid:200004917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iraudzsq.hyperphp.com",nocase; classtype:attempted-recon; sid:200004918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irelandsissuesmagazine.com",nocase; classtype:attempted-recon; sid:200004919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ireveal.app",nocase; classtype:attempted-recon; sid:200004920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irjponline.com",nocase; classtype:attempted-recon; sid:200004921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-claim-onlinetax.com",nocase; classtype:attempted-recon; sid:200004922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-federalgovtaxs.001www.com",nocase; classtype:attempted-recon; sid:200004923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-government-service-tax.com",nocase; classtype:attempted-recon; sid:200004924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-govfederal-financial.serveusers.com",nocase; classtype:attempted-recon; sid:200004925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-information-service.com",nocase; classtype:attempted-recon; sid:200004926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-refund-deposit.otzo.com",nocase; classtype:attempted-recon; sid:200004927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-relieff.com",nocase; classtype:attempted-recon; sid:200004928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-service-info.duckdns.org",nocase; classtype:attempted-recon; sid:200004929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irsdeposit.ml",nocase; classtype:attempted-recon; sid:200004930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irsprofile-taxmanage.com",nocase; classtype:attempted-recon; sid:200004931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"isaacanicama.pe",nocase; classtype:attempted-recon; sid:200004932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"isaacwitty.com",nocase; classtype:attempted-recon; sid:200004933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ishr.cm",nocase; classtype:attempted-recon; sid:200004934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"isnewyorkrealty.com",nocase; classtype:attempted-recon; sid:200004935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"israpunes.com",nocase; classtype:attempted-recon; sid:200004936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"isxykfokg84r.martincaldeyro.com",nocase; classtype:attempted-recon; sid:200004937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"it-europe564598-com.filesusr.com",nocase; classtype:attempted-recon; sid:200004938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itaucardiupp.centralus.cloudapp.azure.com",nocase; classtype:attempted-recon; sid:200004939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itauseguranca.com",nocase; classtype:attempted-recon; sid:200004940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itawteen.com",nocase; classtype:attempted-recon; sid:200004941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ithelpdeskoftxtstate.weebly.com",nocase; classtype:attempted-recon; sid:200004942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itowcakg141.shop",nocase; classtype:attempted-recon; sid:200004943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itsmdshahin.github.io",nocase; classtype:attempted-recon; sid:200004944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itsweblook.com",nocase; classtype:attempted-recon; sid:200004945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ivfcentreinindia.com",nocase; classtype:attempted-recon; sid:200004946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ivresse.com",nocase; classtype:attempted-recon; sid:200004947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iyiqwgug285.shop",nocase; classtype:attempted-recon; sid:200004948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"iykestones.com",nocase; classtype:attempted-recon; sid:200004949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"j2813jackson.wixsite.com",nocase; classtype:attempted-recon; sid:200004950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"j7ufr-hiaaa-aaaad-qcbka-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200004951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jacobliston.com",nocase; classtype:attempted-recon; sid:200004952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jadedistribuidora.com.br",nocase; classtype:attempted-recon; sid:200004953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jagdambeyresidency.com",nocase; classtype:attempted-recon; sid:200004954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jajaja2121.byethost31.com",nocase; classtype:attempted-recon; sid:200004955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jam-023d.gitlab.io",nocase; classtype:attempted-recon; sid:200004956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"james8.aidaform.com",nocase; classtype:attempted-recon; sid:200004957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jansen.direcionare.com",nocase; classtype:attempted-recon; sid:200004958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jappening.cl",nocase; classtype:attempted-recon; sid:200004959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jarsvulmavi.tk",nocase; classtype:attempted-recon; sid:200004960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jasa-bg-kakon-keman-aj-45676748767.web.id",nocase; classtype:attempted-recon; sid:200004961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"javarockingland.com",nocase; classtype:attempted-recon; sid:200004962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jayaljztxw.duckdns.org",nocase; classtype:attempted-recon; sid:200004963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jcbkob.tk",nocase; classtype:attempted-recon; sid:200004964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jcboyp.tk",nocase; classtype:attempted-recon; sid:200004965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jckfirs.punctulcentral.org",nocase; classtype:attempted-recon; sid:200004966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jeethcf.godaddysites.com",nocase; classtype:attempted-recon; sid:200004967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jefferson-franklin.co.uk",nocase; classtype:attempted-recon; sid:200004968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jennipricephotography.com",nocase; classtype:attempted-recon; sid:200004969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jetser-electrical-supply.business.site",nocase; classtype:attempted-recon; sid:200004970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jett.gator.site",nocase; classtype:attempted-recon; sid:200004971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfcwaksahe.duckdns.org",nocase; classtype:attempted-recon; sid:200004972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcvx.bgmeapr.cn",nocase; classtype:attempted-recon; sid:200004973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgcx.qgfogxq.cn",nocase; classtype:attempted-recon; sid:200004974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghc.jzronqy.cn",nocase; classtype:attempted-recon; sid:200004975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghc.lgmsvwm.cn",nocase; classtype:attempted-recon; sid:200004976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghc.naapdei.cn",nocase; classtype:attempted-recon; sid:200004977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghc.vofslxz.cn",nocase; classtype:attempted-recon; sid:200004978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghcx.rr24r1i.cn",nocase; classtype:attempted-recon; sid:200004979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghv.elxyktp.cn",nocase; classtype:attempted-recon; sid:200004980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfghvc.aljtnxw.cn",nocase; classtype:attempted-recon; sid:200004981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jfgvcx.560bvjz.cn",nocase; classtype:attempted-recon; sid:200004982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jflkp.csb.app",nocase; classtype:attempted-recon; sid:200004983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgcvxfd.in33.cn",nocase; classtype:attempted-recon; sid:200004984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfbvc.mfvnifl.cn",nocase; classtype:attempted-recon; sid:200004985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfcv.oyorcna.cn",nocase; classtype:attempted-recon; sid:200004986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jgfcx.fpxyig.cn",nocase; classtype:attempted-recon; sid:200004987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghcv.evheffw.cn",nocase; classtype:attempted-recon; sid:200004988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghcx.bagygek.cn",nocase; classtype:attempted-recon; sid:200004989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghjasfxjahxgkvy.hostfree.pw",nocase; classtype:attempted-recon; sid:200004990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jghvc.rddtxlw.cn",nocase; classtype:attempted-recon; sid:200004991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhfgc.hsvtiab.cn",nocase; classtype:attempted-recon; sid:200004992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhfgcv.tzf0gx.cn",nocase; classtype:attempted-recon; sid:200004993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhgrtyoliutry.liveblog365.com",nocase; classtype:attempted-recon; sid:200004994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhgvb.nnrcatx.cn",nocase; classtype:attempted-recon; sid:200004995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhkythh.heewsci.cn",nocase; classtype:attempted-recon; sid:200004996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jhsvalbvs.hostfree.pw",nocase; classtype:attempted-recon; sid:200004997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jiaozuocq.com",nocase; classtype:attempted-recon; sid:200004998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jinglidg.com",nocase; classtype:attempted-recon; sid:200004999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jinztech.com",nocase; classtype:attempted-recon; sid:200005000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jio-giga-fiber-scale-repair-service.business.site",nocase; classtype:attempted-recon; sid:200005001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jiomart.fwsa.in",nocase; classtype:attempted-recon; sid:200005002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jiynzslsif.duckdns.org",nocase; classtype:attempted-recon; sid:200005003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jjjghv.mbutsco.cn",nocase; classtype:attempted-recon; sid:200005004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jkmhjtg.rgwfglz.cn",nocase; classtype:attempted-recon; sid:200005005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jnnghf.xlfagym.cn",nocase; classtype:attempted-recon; sid:200005006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joannschreiber.com",nocase; classtype:attempted-recon; sid:200005007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joe10009.web.app",nocase; classtype:attempted-recon; sid:200005008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joecamera.net",nocase; classtype:attempted-recon; sid:200005009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"johnnygoshow.com",nocase; classtype:attempted-recon; sid:200005010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"join-hypesquad-form.gq",nocase; classtype:attempted-recon; sid:200005011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jolly-haze-1616.on.fleek.co",nocase; classtype:attempted-recon; sid:200005012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jolly-sabaa.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200005013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jollypeach.com",nocase; classtype:attempted-recon; sid:200005014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jonathanphelpsclarioscom.socalphotoexperts.com",nocase; classtype:attempted-recon; sid:200005015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jow-japan.or.jp",nocase; classtype:attempted-recon; sid:200005016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joycesegers.com",nocase; classtype:attempted-recon; sid:200005017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"joyeriajireh.com.mx",nocase; classtype:attempted-recon; sid:200005018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jp-raku-ten-akuntos.net",nocase; classtype:attempted-recon; sid:200005019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jreasctiaiocyh.cc",nocase; classtype:attempted-recon; sid:200005020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jreast.co.jp.card.servicelist.viewsnet.wanhukang.com",nocase; classtype:attempted-recon; sid:200005021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jrurescjeb.hostfree.pw",nocase; classtype:attempted-recon; sid:200005022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juanesteba.xiaopangkj.space",nocase; classtype:attempted-recon; sid:200005023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juliegr.com",nocase; classtype:attempted-recon; sid:200005024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"juliescrystals.com",nocase; classtype:attempted-recon; sid:200005025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"june.document-project-list.workers.dev",nocase; classtype:attempted-recon; sid:200005026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"justgot.gonevis.com",nocase; classtype:attempted-recon; sid:200005027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"justlighttechnology.justlight.net",nocase; classtype:attempted-recon; sid:200005028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"justsayingbro.com",nocase; classtype:attempted-recon; sid:200005029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jycutlqhze.duckdns.org",nocase; classtype:attempted-recon; sid:200005030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jyeue43rm95p.clickfunnels.com",nocase; classtype:attempted-recon; sid:200005031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jyfgv.ivqitix.cn",nocase; classtype:attempted-recon; sid:200005032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jylxfyieoe.duckdns.org",nocase; classtype:attempted-recon; sid:200005033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jyudfr.qdrfact.cn",nocase; classtype:attempted-recon; sid:200005034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jz2bab.webwave.dev",nocase; classtype:attempted-recon; sid:200005035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"k3ja6d.webwave.dev",nocase; classtype:attempted-recon; sid:200005036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"k4dn97dck1b1ps.wb7cd-197f.oxinease.us",nocase; classtype:attempted-recon; sid:200005037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kaamwalibais.co.in",nocase; classtype:attempted-recon; sid:200005038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kaba.cl",nocase; classtype:attempted-recon; sid:200005039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kafkasariotel.com",nocase; classtype:attempted-recon; sid:200005040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kaharaerad.web.app",nocase; classtype:attempted-recon; sid:200005041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kakao-411cc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kakao-411cc.web.app",nocase; classtype:attempted-recon; sid:200005043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kakiratc.go.ug",nocase; classtype:attempted-recon; sid:200005044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"karafuuru.xyz",nocase; classtype:attempted-recon; sid:200005045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kardiologiebadkissingen.clickfunnels.com",nocase; classtype:attempted-recon; sid:200005046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kargonova.com",nocase; classtype:attempted-recon; sid:200005047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"karllagerfeldshop.com",nocase; classtype:attempted-recon; sid:200005048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"karllagfr.com",nocase; classtype:attempted-recon; sid:200005049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kartaltepespor.com",nocase; classtype:attempted-recon; sid:200005050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kasba.in",nocase; classtype:attempted-recon; sid:200005051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"katabitc.go.ug",nocase; classtype:attempted-recon; sid:200005052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"katanaroninchains.com",nocase; classtype:attempted-recon; sid:200005053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kazirbazar.com",nocase; classtype:attempted-recon; sid:200005054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kbstitchdesigns.com",nocase; classtype:attempted-recon; sid:200005055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kcpwr.com",nocase; classtype:attempted-recon; sid:200005056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kdkk.000webhostapp.com",nocase; classtype:attempted-recon; sid:200005057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kdlscaffolding.co.uk",nocase; classtype:attempted-recon; sid:200005058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kdwryjohzd.duckdns.org",nocase; classtype:attempted-recon; sid:200005059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keadaancus.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200005060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kecc.com",nocase; classtype:attempted-recon; sid:200005061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kecmanijada.com",nocase; classtype:attempted-recon; sid:200005062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keep-passw0rd-supp0rt20211129-0106.supp0rtaaqkadq2zgnizte3ltbly2etnge5yi05ntm3lty2yjcwyzywzdjhmwa.workers.dev",nocase; classtype:attempted-recon; sid:200005063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keepboxactive-msoe3e3-osd2rrf432-d342f4-3f34e32edetferef.pages.dev",nocase; classtype:attempted-recon; sid:200005064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keepupdateto.newsmbccard.buzz",nocase; classtype:attempted-recon; sid:200005065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keesom.win",nocase; classtype:attempted-recon; sid:200005066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kek-technik.com",nocase; classtype:attempted-recon; sid:200005067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kelleyinthekitchen.com",nocase; classtype:attempted-recon; sid:200005068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kencoin.info",nocase; classtype:attempted-recon; sid:200005069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kenpong.com",nocase; classtype:attempted-recon; sid:200005070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kernplus.com",nocase; classtype:attempted-recon; sid:200005071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"key-drcp.com",nocase; classtype:attempted-recon; sid:200005072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keybaxkx.dynvpn.de",nocase; classtype:attempted-recon; sid:200005073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kfgxds.wkqmllk.cn",nocase; classtype:attempted-recon; sid:200005074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghcv.iufdma.cn",nocase; classtype:attempted-recon; sid:200005075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghcv.oekgfec.cn",nocase; classtype:attempted-recon; sid:200005076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghcvds.fijggoa.cn",nocase; classtype:attempted-recon; sid:200005077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghcxv.zkilea.cn",nocase; classtype:attempted-recon; sid:200005078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghdf.ijheaqt.cn",nocase; classtype:attempted-recon; sid:200005079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghm-invest.web.app",nocase; classtype:attempted-recon; sid:200005080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghvb.qfvsjdk.cn",nocase; classtype:attempted-recon; sid:200005081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghvbc.ojvtssx.cn",nocase; classtype:attempted-recon; sid:200005082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghvc.dnaaakm.cn",nocase; classtype:attempted-recon; sid:200005083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghvc.krzsvsf.cn",nocase; classtype:attempted-recon; sid:200005084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghyu.fsoifex.cn",nocase; classtype:attempted-recon; sid:200005085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kghyu.jxuabyb.cn",nocase; classtype:attempted-recon; sid:200005086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khalidouhdane.com",nocase; classtype:attempted-recon; sid:200005087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khanghungcons.com",nocase; classtype:attempted-recon; sid:200005088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khaulex.com",nocase; classtype:attempted-recon; sid:200005089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khgbv.zazslwv.cn",nocase; classtype:attempted-recon; sid:200005090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khghgtf.fyodnjb.cn",nocase; classtype:attempted-recon; sid:200005091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khugjdfg.q0pk84.cn",nocase; classtype:attempted-recon; sid:200005092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"khyberproton.com.pk",nocase; classtype:attempted-recon; sid:200005093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kil.pages.dev",nocase; classtype:attempted-recon; sid:200005094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kilowe-uno.preview-domain.com",nocase; classtype:attempted-recon; sid:200005095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kimc.ac.ke",nocase; classtype:attempted-recon; sid:200005096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kingbiznistkibbcont.tk",nocase; classtype:attempted-recon; sid:200005097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kingkuna.com",nocase; classtype:attempted-recon; sid:200005098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kisiyeozelkartvizit.com",nocase; classtype:attempted-recon; sid:200005099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kissapps.io",nocase; classtype:attempted-recon; sid:200005100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kissmyball.com",nocase; classtype:attempted-recon; sid:200005101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kithocivilengineering.com",nocase; classtype:attempted-recon; sid:200005102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kiwutisy.cyon.site",nocase; classtype:attempted-recon; sid:200005103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjdesigners.com",nocase; classtype:attempted-recon; sid:200005104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghc.xiaoua.cn",nocase; classtype:attempted-recon; sid:200005105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghcx.iwizlkf.cn",nocase; classtype:attempted-recon; sid:200005106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjghy.qcbgxhf.cn",nocase; classtype:attempted-recon; sid:200005107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhbv.arsfydm.cn",nocase; classtype:attempted-recon; sid:200005108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhcv.kelvtn.cn",nocase; classtype:attempted-recon; sid:200005109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhcv.sy67g0.cn",nocase; classtype:attempted-recon; sid:200005110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhcv.zmqpcz.cn",nocase; classtype:attempted-recon; sid:200005111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjhgv.wxtwbty.cn",nocase; classtype:attempted-recon; sid:200005112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjjcqqrerd.duckdns.org",nocase; classtype:attempted-recon; sid:200005113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjubv.fuuxcwi.cn",nocase; classtype:attempted-recon; sid:200005114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kjufgh.upncumm.cn",nocase; classtype:attempted-recon; sid:200005115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kljfdtstrlnnv.hostfree.pw",nocase; classtype:attempted-recon; sid:200005116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kljhcv.jofpfx.cn",nocase; classtype:attempted-recon; sid:200005117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"klockorochsmycken.se",nocase; classtype:attempted-recon; sid:200005118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kmct.edu.in",nocase; classtype:attempted-recon; sid:200005119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kmctartskuttippuram.org",nocase; classtype:attempted-recon; sid:200005120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kmctcoeemergingtechnology.org",nocase; classtype:attempted-recon; sid:200005121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kmyuhjhtf.6kjnzz.cn",nocase; classtype:attempted-recon; sid:200005122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"know-paths.com",nocase; classtype:attempted-recon; sid:200005123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"knowledge.eris.co.in",nocase; classtype:attempted-recon; sid:200005124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kobe-denki.co.jp",nocase; classtype:attempted-recon; sid:200005125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koerich-c-empresarial.com",nocase; classtype:attempted-recon; sid:200005126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kone-ali123-mon-site-web-cheetah-5.cheetah.builderall.com",nocase; classtype:attempted-recon; sid:200005127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kooimanbeveiliging.nl",nocase; classtype:attempted-recon; sid:200005128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koteng.odoo.com",nocase; classtype:attempted-recon; sid:200005129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kpdwpl552.top",nocase; classtype:attempted-recon; sid:200005130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kpdwpl785.top",nocase; classtype:attempted-recon; sid:200005131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kr-bithumb.web.app",nocase; classtype:attempted-recon; sid:200005132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kr.marketic.ai",nocase; classtype:attempted-recon; sid:200005133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kranz21.exat.eu",nocase; classtype:attempted-recon; sid:200005134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"krf365php.weebly.com",nocase; classtype:attempted-recon; sid:200005135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"krupije.com",nocase; classtype:attempted-recon; sid:200005136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kuchkuchnights.com",nocase; classtype:attempted-recon; sid:200005137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kufgv.nczhga.cn",nocase; classtype:attempted-recon; sid:200005138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kuhjd.nzctmnt.cn",nocase; classtype:attempted-recon; sid:200005139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kulgn.weblium.site",nocase; classtype:attempted-recon; sid:200005140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kumkumbhagya.su",nocase; classtype:attempted-recon; sid:200005141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kush002.github.io",nocase; classtype:attempted-recon; sid:200005142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kuybd.ebcyhyl.cn",nocase; classtype:attempted-recon; sid:200005143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kvx.47.ebrutour.com.tr",nocase; classtype:attempted-recon; sid:200005144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kwarransragen.sragen.pramukajateng.or.id",nocase; classtype:attempted-recon; sid:200005145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kwh3ba6dy7.9xc7zyurk2.waitforthetruck.com",nocase; classtype:attempted-recon; sid:200005146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kyht.fkheufy.cn",nocase; classtype:attempted-recon; sid:200005147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kyleosburn.com",nocase; classtype:attempted-recon; sid:200005148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l-123movies.com",nocase; classtype:attempted-recon; sid:200005149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l0g0n-1654546-ve.hostfree.pw",nocase; classtype:attempted-recon; sid:200005150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"la-taperia.com",nocase; classtype:attempted-recon; sid:200005151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"laiserhillacademy.com",nocase; classtype:attempted-recon; sid:200005152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lambdaweb.info",nocase; classtype:attempted-recon; sid:200005153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"landcredi.com",nocase; classtype:attempted-recon; sid:200005154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"laoeqwpeqw424.ga",nocase; classtype:attempted-recon; sid:200005155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"laposte.fr.teeshirtimprime.fr",nocase; classtype:attempted-recon; sid:200005156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"laquintaca.dorettavassilaki.com",nocase; classtype:attempted-recon; sid:200005157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"larindbr.creatorlink.net",nocase; classtype:attempted-recon; sid:200005158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"larvalab.to",nocase; classtype:attempted-recon; sid:200005159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lasecuriterduserviceregionaleca.contactinbio.com",nocase; classtype:attempted-recon; sid:200005160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lasfarolas.digitalizado.ar",nocase; classtype:attempted-recon; sid:200005161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lasvegasmustangservice.com",nocase; classtype:attempted-recon; sid:200005162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lasyaja.github.io",nocase; classtype:attempted-recon; sid:200005163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"late-cloud-9e1b.payment-doc.workers.dev",nocase; classtype:attempted-recon; sid:200005164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"late-hill-6d97.microonedrivelive.workers.dev",nocase; classtype:attempted-recon; sid:200005165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"late-rice-0fc8.regan21.workers.dev",nocase; classtype:attempted-recon; sid:200005166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"latinotravel.cz",nocase; classtype:attempted-recon; sid:200005167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lattassq.hyperphp.com",nocase; classtype:attempted-recon; sid:200005168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"laubros.com",nocase; classtype:attempted-recon; sid:200005169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"launchpad.marketmaking.pro",nocase; classtype:attempted-recon; sid:200005170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"launchpadavalaunch.app",nocase; classtype:attempted-recon; sid:200005171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lawstudenthub.com",nocase; classtype:attempted-recon; sid:200005172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lbcgrouptrans.epizy.com",nocase; classtype:attempted-recon; sid:200005173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lbcpaiement-com.ru",nocase; classtype:attempted-recon; sid:200005174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lbkundermon.gatemanparalegals.com",nocase; classtype:attempted-recon; sid:200005175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lbt.recevoirtransac.com",nocase; classtype:attempted-recon; sid:200005176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"le-diablotin-rouen.com",nocase; classtype:attempted-recon; sid:200005177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"le-site-web-de-lapostenet1.yolasite.com",nocase; classtype:attempted-recon; sid:200005178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"le-site-web-de-orange-pros.yolasite.com",nocase; classtype:attempted-recon; sid:200005179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leadspro.com.br",nocase; classtype:attempted-recon; sid:200005180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"learncricut.top",nocase; classtype:attempted-recon; sid:200005181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leboncon-sale-transaction-2926503910.fr",nocase; classtype:attempted-recon; sid:200005182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ledatop.com",nocase; classtype:attempted-recon; sid:200005183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lega72.webwave.dev",nocase; classtype:attempted-recon; sid:200005184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"legacynutritionandtraining.com",nocase; classtype:attempted-recon; sid:200005185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lemondeceramica.com",nocase; classtype:attempted-recon; sid:200005186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lenkaspares.com",nocase; classtype:attempted-recon; sid:200005187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"levarjohnsontv.com",nocase; classtype:attempted-recon; sid:200005188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"leviathandesign.com.au",nocase; classtype:attempted-recon; sid:200005189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lfksnalsdnlasdjl.hostfree.pw",nocase; classtype:attempted-recon; sid:200005190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lg-onecom-io.web.app",nocase; classtype:attempted-recon; sid:200005191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lgtfinances.com",nocase; classtype:attempted-recon; sid:200005192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lhgsjh09398-ywhjvqhdgyiwqyhws.herokuapp.com",nocase; classtype:attempted-recon; sid:200005193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lhjg.xp4nwl.cn",nocase; classtype:attempted-recon; sid:200005194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"licitacoes.olinda.pe.gov.br",nocase; classtype:attempted-recon; sid:200005195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lideresdehoy.com",nocase; classtype:attempted-recon; sid:200005196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lienquan.garenia.vn",nocase; classtype:attempted-recon; sid:200005197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lieux.in",nocase; classtype:attempted-recon; sid:200005198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"life-aid.in",nocase; classtype:attempted-recon; sid:200005199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lifestylecard.luxsgcardportal.online",nocase; classtype:attempted-recon; sid:200005200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"liff-gateway.lineml.jp",nocase; classtype:attempted-recon; sid:200005201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lightingyourwayhome.com",nocase; classtype:attempted-recon; sid:200005202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lila-s-school-d77e.thinkific.com",nocase; classtype:attempted-recon; sid:200005203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lilac.ly",nocase; classtype:attempted-recon; sid:200005204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"limit-orders-v2.onrender.com",nocase; classtype:attempted-recon; sid:200005205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linea-credito-clientes.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lingering-cloud-7831.on.fleek.co",nocase; classtype:attempted-recon; sid:200005207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linio.applytojob.com",nocase; classtype:attempted-recon; sid:200005208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linioshop.club",nocase; classtype:attempted-recon; sid:200005209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"link-appeal-75441.herokuapp.com",nocase; classtype:attempted-recon; sid:200005210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"link.gmreg5.net",nocase; classtype:attempted-recon; sid:200005211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"literpress.ro",nocase; classtype:attempted-recon; sid:200005212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"litopvolvte.ga",nocase; classtype:attempted-recon; sid:200005213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"little-night-1786.on.fleek.co",nocase; classtype:attempted-recon; sid:200005214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"little-wood-23ca.abssupdatedlogin.workers.dev",nocase; classtype:attempted-recon; sid:200005215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"liturgyoutside.net",nocase; classtype:attempted-recon; sid:200005216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"liusanchuan.github.io",nocase; classtype:attempted-recon; sid:200005217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"live-site.hopto.me",nocase; classtype:attempted-recon; sid:200005218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lively.marbauttulo.workers.dev",nocase; classtype:attempted-recon; sid:200005219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livemainetonline.com",nocase; classtype:attempted-recon; sid:200005220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lj85yy.com",nocase; classtype:attempted-recon; sid:200005221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ljupkopetrovic.com",nocase; classtype:attempted-recon; sid:200005222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lkicvx.lyhgtue.cn",nocase; classtype:attempted-recon; sid:200005223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"llilll.web.app",nocase; classtype:attempted-recon; sid:200005224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lloydsbank.secure-personal-device-login.com",nocase; classtype:attempted-recon; sid:200005225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"llyhugx.cluster028.hosting.ovh.net",nocase; classtype:attempted-recon; sid:200005226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnposte-1processing5pay.8976534.xyz",nocase; classtype:attempted-recon; sid:200005227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnterbacnsko.precondominium.com",nocase; classtype:attempted-recon; sid:200005228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnterbanlkweb.jcllq.com",nocase; classtype:attempted-recon; sid:200005229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnterdesembolso.pejunioferts.live",nocase; classtype:attempted-recon; sid:200005230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loansidemed.com",nocase; classtype:attempted-recon; sid:200005231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"localizzan2-6.com",nocase; classtype:attempted-recon; sid:200005232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"log-defikingdams.com",nocase; classtype:attempted-recon; sid:200005233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"log-deikifngsdoms.com",nocase; classtype:attempted-recon; sid:200005234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-authy7tpd6mea4cjfq2zq4q11svmq3m6wkllbwzdvmo4tai.website.yandexcloud.net",nocase; classtype:attempted-recon; sid:200005235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-device-sign-file-view.web.app",nocase; classtype:attempted-recon; sid:200005236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-file-share-view-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-file-share-view-folder.web.app",nocase; classtype:attempted-recon; sid:200005238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-inv-folder-file-view.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-inv-folder-file-view.web.app",nocase; classtype:attempted-recon; sid:200005240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-ksr38vot5ruv9ht5ml9cz93b64nin5uolrsds9sky83.website.yandexcloud.net",nocase; classtype:attempted-recon; sid:200005241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-live.com-s02.net",nocase; classtype:attempted-recon; sid:200005242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-docu-file-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-docu-file-folder.web.app",nocase; classtype:attempted-recon; sid:200005244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-folder.web.app",nocase; classtype:attempted-recon; sid:200005246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-1.web.app",nocase; classtype:attempted-recon; sid:200005248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-2.web.app",nocase; classtype:attempted-recon; sid:200005250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-3.web.app",nocase; classtype:attempted-recon; sid:200005252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-4.web.app",nocase; classtype:attempted-recon; sid:200005254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-file-share-5.web.app",nocase; classtype:attempted-recon; sid:200005256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-folder-view.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-folder-view.web.app",nocase; classtype:attempted-recon; sid:200005258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-pdf-point.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-drive-pdf-point.web.app",nocase; classtype:attempted-recon; sid:200005260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-1.web.app",nocase; classtype:attempted-recon; sid:200005262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-2.web.app",nocase; classtype:attempted-recon; sid:200005264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-3.web.app",nocase; classtype:attempted-recon; sid:200005266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder-4.web.app",nocase; classtype:attempted-recon; sid:200005268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-file-view-folder.web.app",nocase; classtype:attempted-recon; sid:200005270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-folder-agl-coa.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-folder-agl-coa.web.app",nocase; classtype:attempted-recon; sid:200005272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-id-file-storage.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-id-file-storage.web.app",nocase; classtype:attempted-recon; sid:200005274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-share-file-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micro-share-file-folder.web.app",nocase; classtype:attempted-recon; sid:200005276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-micrsoft-onedrive-signin.sansiro324wnet.ru",nocase; classtype:attempted-recon; sid:200005277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-net-micro-inv-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-net-micro-inv-folder.web.app",nocase; classtype:attempted-recon; sid:200005279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-device-drive.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-folder-view.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-folder-view.web.app",nocase; classtype:attempted-recon; sid:200005282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-review-doc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-review-doc.web.app",nocase; classtype:attempted-recon; sid:200005284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-share-file-review-folder.web.app",nocase; classtype:attempted-recon; sid:200005285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-u4vbxnfnqpfwav2l9t01osrwp3oslph42xvlcr721rk.website.yandexcloud.net",nocase; classtype:attempted-recon; sid:200005286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-view-file-share-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-view-file-share-folder.web.app",nocase; classtype:attempted-recon; sid:200005288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-view-share-folder-file.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login-view-share-folder-file.web.app",nocase; classtype:attempted-recon; sid:200005290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login.arnericanexpress.rockyding.top",nocase; classtype:attempted-recon; sid:200005291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login.micros0ftonlin3serviseapplications.tk",nocase; classtype:attempted-recon; sid:200005292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login.microsoftoline.larga-me.com",nocase; classtype:attempted-recon; sid:200005293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login1.sitelio.me",nocase; classtype:attempted-recon; sid:200005294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"login38.godaddysites.com",nocase; classtype:attempted-recon; sid:200005295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginmanager-autodns.club-economie-fonctionnalite.fr",nocase; classtype:attempted-recon; sid:200005296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginmicrosoftonline-remittancedeposit.myportfolio.com",nocase; classtype:attempted-recon; sid:200005297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginmicrosoftonlinens.myportfolio.com",nocase; classtype:attempted-recon; sid:200005298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginmicrosoftonlineproposal.myportfolio.com",nocase; classtype:attempted-recon; sid:200005299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loginprim2.sslblindado.com",nocase; classtype:attempted-recon; sid:200005300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logmedo.com",nocase; classtype:attempted-recon; sid:200005301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logn-visa.co-jp.zdafacg.top",nocase; classtype:attempted-recon; sid:200005302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logon-in.weebly.com",nocase; classtype:attempted-recon; sid:200005303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"logsik.net",nocase; classtype:attempted-recon; sid:200005304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lok.globalinsurancefinance.net",nocase; classtype:attempted-recon; sid:200005305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lomadesarrollos.mx",nocase; classtype:attempted-recon; sid:200005306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lomksrare.org",nocase; classtype:attempted-recon; sid:200005307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"long-math-2485.on.fleek.co",nocase; classtype:attempted-recon; sid:200005308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"longicfiles.ns01.info",nocase; classtype:attempted-recon; sid:200005309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"longnanmr.com",nocase; classtype:attempted-recon; sid:200005310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lookatmynewphotos.com",nocase; classtype:attempted-recon; sid:200005311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lookinqatar.com",nocase; classtype:attempted-recon; sid:200005312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looksrare.cx",nocase; classtype:attempted-recon; sid:200005313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looksrare.is",nocase; classtype:attempted-recon; sid:200005314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looksrare.rip",nocase; classtype:attempted-recon; sid:200005315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"looksrrare.net",nocase; classtype:attempted-recon; sid:200005316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loopsmarketing.org",nocase; classtype:attempted-recon; sid:200005317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lot-lp-x.web.app",nocase; classtype:attempted-recon; sid:200005318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lovetasks.com",nocase; classtype:attempted-recon; sid:200005319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lplusd.com",nocase; classtype:attempted-recon; sid:200005320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lrs-finance-aids-tax-notice.com",nocase; classtype:attempted-recon; sid:200005321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lrs-office-tax-aids-finance-gov.com",nocase; classtype:attempted-recon; sid:200005322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lsdaeszzxsa.hostfree.pw",nocase; classtype:attempted-recon; sid:200005323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lsdxztzrx.liveblog365.com",nocase; classtype:attempted-recon; sid:200005324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lsecatlituapepat.tk",nocase; classtype:attempted-recon; sid:200005325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lt27.de",nocase; classtype:attempted-recon; sid:200005326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ltir681.top",nocase; classtype:attempted-recon; sid:200005327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lucchhi.com",nocase; classtype:attempted-recon; sid:200005328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"luciavent.com",nocase; classtype:attempted-recon; sid:200005329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lucy-walker.com",nocase; classtype:attempted-recon; sid:200005330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ludo14.com",nocase; classtype:attempted-recon; sid:200005331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"luomafly.cn",nocase; classtype:attempted-recon; sid:200005332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lwnfzhkysp.duckdns.org",nocase; classtype:attempted-recon; sid:200005333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lybilee.com",nocase; classtype:attempted-recon; sid:200005334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lychee12246935.brizy.site",nocase; classtype:attempted-recon; sid:200005335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lydab.com",nocase; classtype:attempted-recon; sid:200005336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lydian-furtive-sceptre.glitch.me",nocase; classtype:attempted-recon; sid:200005337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lyjkkboazz.duckdns.org",nocase; classtype:attempted-recon; sid:200005338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lzpjrhe.top",nocase; classtype:attempted-recon; sid:200005339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m-tb.com.l004.xyz",nocase; classtype:attempted-recon; sid:200005340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m-tb3x.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.ckcorshoes.com",nocase; classtype:attempted-recon; sid:200005342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.facebook.unaux.com",nocase; classtype:attempted-recon; sid:200005343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.fancy-bush-cf01.marhabitas.workers.dev",nocase; classtype:attempted-recon; sid:200005344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.help.insecurpage.workers.dev",nocase; classtype:attempted-recon; sid:200005345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.protc.safty-pege.workers.dev",nocase; classtype:attempted-recon; sid:200005346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.recovery.safetyacount.workers.dev",nocase; classtype:attempted-recon; sid:200005347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.recovery.saftypageupdate.workers.dev",nocase; classtype:attempted-recon; sid:200005348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.still-band-a6a6.saftyalrt.workers.dev",nocase; classtype:attempted-recon; sid:200005349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.super-recipe-d45d.sombodysad.workers.dev",nocase; classtype:attempted-recon; sid:200005350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m2m.ingenieries.com",nocase; classtype:attempted-recon; sid:200005351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m42club.com",nocase; classtype:attempted-recon; sid:200005352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m87services.com",nocase; classtype:attempted-recon; sid:200005353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.1cwrkomf.com.cn",nocase; classtype:attempted-recon; sid:200005354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.2980415.com.cn",nocase; classtype:attempted-recon; sid:200005355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.4oylm13.com.cn",nocase; classtype:attempted-recon; sid:200005356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.618zwt7l.com.cn",nocase; classtype:attempted-recon; sid:200005357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.687feyac.com.cn",nocase; classtype:attempted-recon; sid:200005358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.76cjmrsa.com.cn",nocase; classtype:attempted-recon; sid:200005359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.9orehdww.com.cn",nocase; classtype:attempted-recon; sid:200005360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.aa2cpc7.com.cn",nocase; classtype:attempted-recon; sid:200005361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.bgjkcn.com.cn",nocase; classtype:attempted-recon; sid:200005362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.bp9ryipa.com.cn",nocase; classtype:attempted-recon; sid:200005363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.cannmedia.com.cn",nocase; classtype:attempted-recon; sid:200005364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.cengting.com.cn",nocase; classtype:attempted-recon; sid:200005365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.cengtong.com.cn",nocase; classtype:attempted-recon; sid:200005366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.congdui.com.cn",nocase; classtype:attempted-recon; sid:200005367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.cspabik1.com.cn",nocase; classtype:attempted-recon; sid:200005368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.dgrunding.com.cn",nocase; classtype:attempted-recon; sid:200005369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.dh-hm.com.cn",nocase; classtype:attempted-recon; sid:200005370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.diandianbei.com.cn",nocase; classtype:attempted-recon; sid:200005371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.dinisi.com.cn",nocase; classtype:attempted-recon; sid:200005372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.duirang.com.cn",nocase; classtype:attempted-recon; sid:200005373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.e-sunde.com.cn",nocase; classtype:attempted-recon; sid:200005374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.enzuan.com.cn",nocase; classtype:attempted-recon; sid:200005375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.f1emc51l.com.cn",nocase; classtype:attempted-recon; sid:200005376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.facesmile.com.cn",nocase; classtype:attempted-recon; sid:200005377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.fkihti.com.cn",nocase; classtype:attempted-recon; sid:200005378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.gongzha.com.cn",nocase; classtype:attempted-recon; sid:200005379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.gtm-m.com.cn",nocase; classtype:attempted-recon; sid:200005380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.guaian.com.cn",nocase; classtype:attempted-recon; sid:200005381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.hansor6.com.cn",nocase; classtype:attempted-recon; sid:200005382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.hfhybh.com.cn",nocase; classtype:attempted-recon; sid:200005383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.jionglai.com.cn",nocase; classtype:attempted-recon; sid:200005384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.jiongruan.com.cn",nocase; classtype:attempted-recon; sid:200005385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.kasiqi.com.cn",nocase; classtype:attempted-recon; sid:200005386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.kljwater.com.cn",nocase; classtype:attempted-recon; sid:200005387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.liehang.com.cn",nocase; classtype:attempted-recon; sid:200005388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.liuyan068.com.cn",nocase; classtype:attempted-recon; sid:200005389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.lunsuo.com.cn",nocase; classtype:attempted-recon; sid:200005390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.mangjiong.com.cn",nocase; classtype:attempted-recon; sid:200005391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.meiyaofz.com.cn",nocase; classtype:attempted-recon; sid:200005392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.miangong.com.cn",nocase; classtype:attempted-recon; sid:200005393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.motomods.com.cn",nocase; classtype:attempted-recon; sid:200005394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.niaoguang.com.cn",nocase; classtype:attempted-recon; sid:200005395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.njhccc.com.cn",nocase; classtype:attempted-recon; sid:200005396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.ojiwsle5.com.cn",nocase; classtype:attempted-recon; sid:200005397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.ontune.com.cn",nocase; classtype:attempted-recon; sid:200005398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.rcwhmlc.com.cn",nocase; classtype:attempted-recon; sid:200005399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.sce7ok9y.com.cn",nocase; classtype:attempted-recon; sid:200005400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.sdicif.com.cn",nocase; classtype:attempted-recon; sid:200005401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.selectro.com.cn",nocase; classtype:attempted-recon; sid:200005402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.shuashao.com.cn",nocase; classtype:attempted-recon; sid:200005403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.sochang.com.cn",nocase; classtype:attempted-recon; sid:200005404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.st4d7h3.com.cn",nocase; classtype:attempted-recon; sid:200005405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.townsky.com.cn",nocase; classtype:attempted-recon; sid:200005406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.xrzhvd.com.cn",nocase; classtype:attempted-recon; sid:200005407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.yahoo3721.com.cn",nocase; classtype:attempted-recon; sid:200005408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.yaochuo.com.cn",nocase; classtype:attempted-recon; sid:200005409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.zhankeng.com.cn",nocase; classtype:attempted-recon; sid:200005410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.zxy120.com.cn",nocase; classtype:attempted-recon; sid:200005411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.101hao.com.cn",nocase; classtype:attempted-recon; sid:200005412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.5918wz.com.cn",nocase; classtype:attempted-recon; sid:200005413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.6ljatk58.com.cn",nocase; classtype:attempted-recon; sid:200005414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.7gzmmari.com.cn",nocase; classtype:attempted-recon; sid:200005415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.8e0ptyb6.com.cn",nocase; classtype:attempted-recon; sid:200005416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.ai-talk.com.cn",nocase; classtype:attempted-recon; sid:200005417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.boyada.com.cn",nocase; classtype:attempted-recon; sid:200005418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.c5bnappc.com.cn",nocase; classtype:attempted-recon; sid:200005419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.cenggua.com.cn",nocase; classtype:attempted-recon; sid:200005420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.cengzhuo.com.cn",nocase; classtype:attempted-recon; sid:200005421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.dalianmei.com.cn",nocase; classtype:attempted-recon; sid:200005422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.fengkehui.com.cn",nocase; classtype:attempted-recon; sid:200005423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.fw6yg0a.com.cn",nocase; classtype:attempted-recon; sid:200005424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.gangnin.com.cn",nocase; classtype:attempted-recon; sid:200005425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.gouqiya.com.cn",nocase; classtype:attempted-recon; sid:200005426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.greenlady.com.cn",nocase; classtype:attempted-recon; sid:200005427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.gsuyta.com.cn",nocase; classtype:attempted-recon; sid:200005428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.h2mdrb92.com.cn",nocase; classtype:attempted-recon; sid:200005429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.handier.com.cn",nocase; classtype:attempted-recon; sid:200005430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.hangchong.com.cn",nocase; classtype:attempted-recon; sid:200005431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.htmzcb84.com.cn",nocase; classtype:attempted-recon; sid:200005432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.i4sm1th5.com.cn",nocase; classtype:attempted-recon; sid:200005433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.igtfvr.com.cn",nocase; classtype:attempted-recon; sid:200005434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.ip2008.com.cn",nocase; classtype:attempted-recon; sid:200005435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.jiongban.com.cn",nocase; classtype:attempted-recon; sid:200005436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.jiongzong.com.cn",nocase; classtype:attempted-recon; sid:200005437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.kairao.com.cn",nocase; classtype:attempted-recon; sid:200005438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.kaspresky.com.cn",nocase; classtype:attempted-recon; sid:200005439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.kidsshoes.com.cn",nocase; classtype:attempted-recon; sid:200005440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.kthxty.com.cn",nocase; classtype:attempted-recon; sid:200005441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.laijiong.com.cn",nocase; classtype:attempted-recon; sid:200005442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.luqiong.com.cn",nocase; classtype:attempted-recon; sid:200005443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.lvdfpl3.com.cn",nocase; classtype:attempted-recon; sid:200005444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.minshao.com.cn",nocase; classtype:attempted-recon; sid:200005445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.miugun.com.cn",nocase; classtype:attempted-recon; sid:200005446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.mnt8amg.com.cn",nocase; classtype:attempted-recon; sid:200005447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.mtspyx.com.cn",nocase; classtype:attempted-recon; sid:200005448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.mtyttjc.com.cn",nocase; classtype:attempted-recon; sid:200005449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.nangsai.com.cn",nocase; classtype:attempted-recon; sid:200005450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.niaotian.com.cn",nocase; classtype:attempted-recon; sid:200005451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.nrxeeee.com.cn",nocase; classtype:attempted-recon; sid:200005452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.o792mwbf.com.cn",nocase; classtype:attempted-recon; sid:200005453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.pangpan.com.cn",nocase; classtype:attempted-recon; sid:200005454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.sikafu.com.cn",nocase; classtype:attempted-recon; sid:200005455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.tgnkuv.com.cn",nocase; classtype:attempted-recon; sid:200005456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.tjxsxs.com.cn",nocase; classtype:attempted-recon; sid:200005457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.whship.com.cn",nocase; classtype:attempted-recon; sid:200005458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.willhong.com.cn",nocase; classtype:attempted-recon; sid:200005459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.ywajpk7e.com.cn",nocase; classtype:attempted-recon; sid:200005460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"machineryzoneservice.com",nocase; classtype:attempted-recon; sid:200005461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.chenmanqi.top",nocase; classtype:attempted-recon; sid:200005462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.rwmcr.top",nocase; classtype:attempted-recon; sid:200005463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.uvlhwb.top",nocase; classtype:attempted-recon; sid:200005464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.wiguyc.top",nocase; classtype:attempted-recon; sid:200005465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.wkbakq.top",nocase; classtype:attempted-recon; sid:200005466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.wmysah.top",nocase; classtype:attempted-recon; sid:200005467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.wotygl.top",nocase; classtype:attempted-recon; sid:200005468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.wozavw.top",nocase; classtype:attempted-recon; sid:200005469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.xfertf.top",nocase; classtype:attempted-recon; sid:200005470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.xloclk.top",nocase; classtype:attempted-recon; sid:200005471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.xovtfx.top",nocase; classtype:attempted-recon; sid:200005472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.xubnkg.top",nocase; classtype:attempted-recon; sid:200005473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.xvljph.top",nocase; classtype:attempted-recon; sid:200005474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.xvotal.top",nocase; classtype:attempted-recon; sid:200005475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.xwitwq.top",nocase; classtype:attempted-recon; sid:200005476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.ybmkwa.top",nocase; classtype:attempted-recon; sid:200005477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.ydpssl.top",nocase; classtype:attempted-recon; sid:200005478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.yfnvfr.top",nocase; classtype:attempted-recon; sid:200005479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.yfsjiq.top",nocase; classtype:attempted-recon; sid:200005480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.yqggww.top",nocase; classtype:attempted-recon; sid:200005481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.ytbspo.top",nocase; classtype:attempted-recon; sid:200005482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.yvpnxy.top",nocase; classtype:attempted-recon; sid:200005483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.yyyuwr.top",nocase; classtype:attempted-recon; sid:200005484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.yyzded.top",nocase; classtype:attempted-recon; sid:200005485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.zohlkk.top",nocase; classtype:attempted-recon; sid:200005486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.zpirok.top",nocase; classtype:attempted-recon; sid:200005487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.zrzckw.top",nocase; classtype:attempted-recon; sid:200005488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.zusrue.top",nocase; classtype:attempted-recon; sid:200005489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maculverifynowlrvc.ddns.net",nocase; classtype:attempted-recon; sid:200005490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madens.com.pl",nocase; classtype:attempted-recon; sid:200005491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madisonpiercing.fr",nocase; classtype:attempted-recon; sid:200005492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"madrid-web-home.blogspot.com",nocase; classtype:attempted-recon; sid:200005493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maestro.my.prod.dfg152.ru",nocase; classtype:attempted-recon; sid:200005494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magaduzela.co.za",nocase; classtype:attempted-recon; sid:200005495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magiamgiashopee.com",nocase; classtype:attempted-recon; sid:200005496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magiceden-sell.com",nocase; classtype:attempted-recon; sid:200005497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magicreator.com",nocase; classtype:attempted-recon; sid:200005498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magicvelocityrating.com",nocase; classtype:attempted-recon; sid:200005499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magnumforces.com",nocase; classtype:attempted-recon; sid:200005500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mahalatmasr.com",nocase; classtype:attempted-recon; sid:200005501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mahikapur.in",nocase; classtype:attempted-recon; sid:200005502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maiduguripoloclub.com",nocase; classtype:attempted-recon; sid:200005503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail-ovhcloud.web.app",nocase; classtype:attempted-recon; sid:200005504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail-ssocloud-srvr67yhguh.pages.dev",nocase; classtype:attempted-recon; sid:200005505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail-west.web.app",nocase; classtype:attempted-recon; sid:200005506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.bungalowdubai.com",nocase; classtype:attempted-recon; sid:200005507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.clamps.jp",nocase; classtype:attempted-recon; sid:200005508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.derbyde.ae",nocase; classtype:attempted-recon; sid:200005509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.doorstepsales.com",nocase; classtype:attempted-recon; sid:200005510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.fipbrands.com",nocase; classtype:attempted-recon; sid:200005511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.higher.co.in",nocase; classtype:attempted-recon; sid:200005512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.ims-fe.com",nocase; classtype:attempted-recon; sid:200005513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.jinztech.com",nocase; classtype:attempted-recon; sid:200005514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.mksc.co.tz",nocase; classtype:attempted-recon; sid:200005515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.newcourses.co.il",nocase; classtype:attempted-recon; sid:200005516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.pdc13.com",nocase; classtype:attempted-recon; sid:200005517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.triplespeedllc.com",nocase; classtype:attempted-recon; sid:200005518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.wellsfargo-1.duckdns.org",nocase; classtype:attempted-recon; sid:200005519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.wslconstrucoes.com",nocase; classtype:attempted-recon; sid:200005520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailboxverification98201.weebly.com",nocase; classtype:attempted-recon; sid:200005521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailbtinternet.github.io",nocase; classtype:attempted-recon; sid:200005522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildeliverychannel765.godaddysites.com",nocase; classtype:attempted-recon; sid:200005523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildeliverysubsystem345.godaddysites.com",nocase; classtype:attempted-recon; sid:200005524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildeliverysubsystem436.godaddysites.com",nocase; classtype:attempted-recon; sid:200005525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maildeliverysubsystem890.godaddysites.com",nocase; classtype:attempted-recon; sid:200005526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailing_servers001.godaddysites.com",nocase; classtype:attempted-recon; sid:200005527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maillfence.weebly.com",nocase; classtype:attempted-recon; sid:200005528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maillistmoney.com",nocase; classtype:attempted-recon; sid:200005529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailplusrolerequestedprivatemailupdates.pages.dev",nocase; classtype:attempted-recon; sid:200005530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailserver7656566.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200005531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailsupportchannel768.godaddysites.com",nocase; classtype:attempted-recon; sid:200005532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailupdatelogin11111.weebly.com",nocase; classtype:attempted-recon; sid:200005533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailusub.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mailusub.web.app",nocase; classtype:attempted-recon; sid:200005535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"main.d2bm2mdrpfygqf.amplifyapp.com",nocase; classtype:attempted-recon; sid:200005536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"main.dnlgage3kw0qf.amplifyapp.com",nocase; classtype:attempted-recon; sid:200005537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mainbscrectify.com",nocase; classtype:attempted-recon; sid:200005538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mainnetdappbot.net",nocase; classtype:attempted-recon; sid:200005539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn1.web.app",nocase; classtype:attempted-recon; sid:200005541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn10.web.app",nocase; classtype:attempted-recon; sid:200005543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn11.web.app",nocase; classtype:attempted-recon; sid:200005545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn12.web.app",nocase; classtype:attempted-recon; sid:200005547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn2.web.app",nocase; classtype:attempted-recon; sid:200005549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn3.web.app",nocase; classtype:attempted-recon; sid:200005551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn4.web.app",nocase; classtype:attempted-recon; sid:200005553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn5.web.app",nocase; classtype:attempted-recon; sid:200005555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn6.web.app",nocase; classtype:attempted-recon; sid:200005557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn7.web.app",nocase; classtype:attempted-recon; sid:200005559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn8.web.app",nocase; classtype:attempted-recon; sid:200005561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"majndhuahehjwenwn9.web.app",nocase; classtype:attempted-recon; sid:200005563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"makstcs-go.ru",nocase; classtype:attempted-recon; sid:200005564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"malaprontaargentina.com.br",nocase; classtype:attempted-recon; sid:200005565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"malgritrarkna.com",nocase; classtype:attempted-recon; sid:200005566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mamaelba.com",nocase; classtype:attempted-recon; sid:200005567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mamifoundation.org",nocase; classtype:attempted-recon; sid:200005568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mamkefu.kanuomei.com",nocase; classtype:attempted-recon; sid:200005569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe1.web.app",nocase; classtype:attempted-recon; sid:200005571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe10.web.app",nocase; classtype:attempted-recon; sid:200005573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe11.web.app",nocase; classtype:attempted-recon; sid:200005575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe12.web.app",nocase; classtype:attempted-recon; sid:200005577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe2.web.app",nocase; classtype:attempted-recon; sid:200005579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe3.web.app",nocase; classtype:attempted-recon; sid:200005581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe4.web.app",nocase; classtype:attempted-recon; sid:200005583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe5.web.app",nocase; classtype:attempted-recon; sid:200005585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe6.web.app",nocase; classtype:attempted-recon; sid:200005587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe7.web.app",nocase; classtype:attempted-recon; sid:200005589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe8.web.app",nocase; classtype:attempted-recon; sid:200005591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandhauirhabe9.web.app",nocase; classtype:attempted-recon; sid:200005593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mannygonzales.wpcdn-a.com",nocase; classtype:attempted-recon; sid:200005594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.02cky18n.com.cn",nocase; classtype:attempted-recon; sid:200005595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.0571pf.com.cn",nocase; classtype:attempted-recon; sid:200005596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.0jw7a4gy.com.cn",nocase; classtype:attempted-recon; sid:200005597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.2009mp3.com.cn",nocase; classtype:attempted-recon; sid:200005598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.24pl5id2.com.cn",nocase; classtype:attempted-recon; sid:200005599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.258448.com.cn",nocase; classtype:attempted-recon; sid:200005600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.2rf7hec9.com.cn",nocase; classtype:attempted-recon; sid:200005601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.2rml4wyj.com.cn",nocase; classtype:attempted-recon; sid:200005602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.2taoke.com.cn",nocase; classtype:attempted-recon; sid:200005603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.3rdeye.com.cn",nocase; classtype:attempted-recon; sid:200005604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.41sj8oo5.com.cn",nocase; classtype:attempted-recon; sid:200005605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.467tuligo.com.cn",nocase; classtype:attempted-recon; sid:200005606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.4yhmeni1.com.cn",nocase; classtype:attempted-recon; sid:200005607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.51cpjm.com.cn",nocase; classtype:attempted-recon; sid:200005608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.5ltzg4l.com.cn",nocase; classtype:attempted-recon; sid:200005609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.5me8jao.com.cn",nocase; classtype:attempted-recon; sid:200005610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.62omc5cj.com.cn",nocase; classtype:attempted-recon; sid:200005611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.68cajhh2.com.cn",nocase; classtype:attempted-recon; sid:200005612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.7lmg8cf2.com.cn",nocase; classtype:attempted-recon; sid:200005613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.7nydmjms.com.cn",nocase; classtype:attempted-recon; sid:200005614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.7o2z4la.com.cn",nocase; classtype:attempted-recon; sid:200005615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.7r9wbdfl.com.cn",nocase; classtype:attempted-recon; sid:200005616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.94wbag4w.com.cn",nocase; classtype:attempted-recon; sid:200005617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.96a2lk5h.com.cn",nocase; classtype:attempted-recon; sid:200005618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.9pa4c7kf.com.cn",nocase; classtype:attempted-recon; sid:200005619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.adopen.com.cn",nocase; classtype:attempted-recon; sid:200005620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ae9jlc1w.com.cn",nocase; classtype:attempted-recon; sid:200005621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.aes9cm4h.com.cn",nocase; classtype:attempted-recon; sid:200005622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.anggun.com.cn",nocase; classtype:attempted-recon; sid:200005623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.anmg74.com.cn",nocase; classtype:attempted-recon; sid:200005624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.anmg95.com.cn",nocase; classtype:attempted-recon; sid:200005625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.awy52gc.com.cn",nocase; classtype:attempted-recon; sid:200005626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.bjyyzs.com.cn",nocase; classtype:attempted-recon; sid:200005627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.caochui.com.cn",nocase; classtype:attempted-recon; sid:200005628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.catbjsc.com.cn",nocase; classtype:attempted-recon; sid:200005629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.cenben.com.cn",nocase; classtype:attempted-recon; sid:200005630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.cengce.com.cn",nocase; classtype:attempted-recon; sid:200005631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.cengcong.com.cn",nocase; classtype:attempted-recon; sid:200005632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.cengcou.com.cn",nocase; classtype:attempted-recon; sid:200005633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.chaikuai.com.cn",nocase; classtype:attempted-recon; sid:200005634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.chaoah.com.cn",nocase; classtype:attempted-recon; sid:200005635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.cosmoveda.com.cn",nocase; classtype:attempted-recon; sid:200005636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.cscdma.com.cn",nocase; classtype:attempted-recon; sid:200005637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.cxqingxi.com.cn",nocase; classtype:attempted-recon; sid:200005638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.cyok9b9k.com.cn",nocase; classtype:attempted-recon; sid:200005639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.cz9s5fe.com.cn",nocase; classtype:attempted-recon; sid:200005640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.czqylaw.com.cn",nocase; classtype:attempted-recon; sid:200005641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.da4f8sw7.com.cn",nocase; classtype:attempted-recon; sid:200005642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.danfudun.com.cn",nocase; classtype:attempted-recon; sid:200005643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.dangrang.com.cn",nocase; classtype:attempted-recon; sid:200005644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.dapenti.com.cn",nocase; classtype:attempted-recon; sid:200005645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.dascrede.com.cn",nocase; classtype:attempted-recon; sid:200005646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.diaozuan.com.cn",nocase; classtype:attempted-recon; sid:200005647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.dyetieba.com.cn",nocase; classtype:attempted-recon; sid:200005648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.dz5e4pdb.com.cn",nocase; classtype:attempted-recon; sid:200005649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.eczifkk8.com.cn",nocase; classtype:attempted-recon; sid:200005650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.elourwb.com.cn",nocase; classtype:attempted-recon; sid:200005651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.exlrtf.com.cn",nocase; classtype:attempted-recon; sid:200005652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.fanzuan.com.cn",nocase; classtype:attempted-recon; sid:200005653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.fchzjdlo.com.cn",nocase; classtype:attempted-recon; sid:200005654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.findsky.com.cn",nocase; classtype:attempted-recon; sid:200005655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.firson.com.cn",nocase; classtype:attempted-recon; sid:200005656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.g2ahwmfl.com.cn",nocase; classtype:attempted-recon; sid:200005657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ghnclwyp.com.cn",nocase; classtype:attempted-recon; sid:200005658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.goucun.com.cn",nocase; classtype:attempted-recon; sid:200005659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.guashui.com.cn",nocase; classtype:attempted-recon; sid:200005660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.gzhuilong.com.cn",nocase; classtype:attempted-recon; sid:200005661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.gzrongyi.com.cn",nocase; classtype:attempted-recon; sid:200005662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.haivli.com.cn",nocase; classtype:attempted-recon; sid:200005663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.hanguoxxw.com.cn",nocase; classtype:attempted-recon; sid:200005664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.hanyimg.com.cn",nocase; classtype:attempted-recon; sid:200005665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.hbixwjd.com.cn",nocase; classtype:attempted-recon; sid:200005666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.hjpgggg.com.cn",nocase; classtype:attempted-recon; sid:200005667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.hnhyxy.com.cn",nocase; classtype:attempted-recon; sid:200005668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.hotfax.com.cn",nocase; classtype:attempted-recon; sid:200005669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.huaihun.com.cn",nocase; classtype:attempted-recon; sid:200005670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.huaiwai.com.cn",nocase; classtype:attempted-recon; sid:200005671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.hunluan.com.cn",nocase; classtype:attempted-recon; sid:200005672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ielts100.com.cn",nocase; classtype:attempted-recon; sid:200005673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ifj2n1zk.com.cn",nocase; classtype:attempted-recon; sid:200005674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ig9sez43.com.cn",nocase; classtype:attempted-recon; sid:200005675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.iit-abs.com.cn",nocase; classtype:attempted-recon; sid:200005676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.in-me.com.cn",nocase; classtype:attempted-recon; sid:200005677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.jianjule.com.cn",nocase; classtype:attempted-recon; sid:200005678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.jiqingba.com.cn",nocase; classtype:attempted-recon; sid:200005679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.juancui.com.cn",nocase; classtype:attempted-recon; sid:200005680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.kado-icl.com.cn",nocase; classtype:attempted-recon; sid:200005681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.kaoruo.com.cn",nocase; classtype:attempted-recon; sid:200005682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.kinoptik.com.cn",nocase; classtype:attempted-recon; sid:200005683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.kmjsk.com.cn",nocase; classtype:attempted-recon; sid:200005684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.knwwzd8w.com.cn",nocase; classtype:attempted-recon; sid:200005685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ks3000.com.cn",nocase; classtype:attempted-recon; sid:200005686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.kzntsjpw.com.cn",nocase; classtype:attempted-recon; sid:200005687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.laohuji8.com.cn",nocase; classtype:attempted-recon; sid:200005688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.lifelle.com.cn",nocase; classtype:attempted-recon; sid:200005689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.lingzuier.com.cn",nocase; classtype:attempted-recon; sid:200005690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ljnnfx.com.cn",nocase; classtype:attempted-recon; sid:200005691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.lkklpfp.com.cn",nocase; classtype:attempted-recon; sid:200005692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.luanzhi.com.cn",nocase; classtype:attempted-recon; sid:200005693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.lygclean.com.cn",nocase; classtype:attempted-recon; sid:200005694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.lyrlzy.com.cn",nocase; classtype:attempted-recon; sid:200005695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.m806h5p8.com.cn",nocase; classtype:attempted-recon; sid:200005696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.mcgwkyyk.com.cn",nocase; classtype:attempted-recon; sid:200005697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.memberly.com.cn",nocase; classtype:attempted-recon; sid:200005698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.menduimen.com.cn",nocase; classtype:attempted-recon; sid:200005699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.mfdamjse.com.cn",nocase; classtype:attempted-recon; sid:200005700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.mgm985.com.cn",nocase; classtype:attempted-recon; sid:200005701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.mobcrush.com.cn",nocase; classtype:attempted-recon; sid:200005702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.moshuai.com.cn",nocase; classtype:attempted-recon; sid:200005703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.mouruo.com.cn",nocase; classtype:attempted-recon; sid:200005704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.myglgw.com.cn",nocase; classtype:attempted-recon; sid:200005705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.mzbk4sk5.com.cn",nocase; classtype:attempted-recon; sid:200005706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.na1p4wo0.com.cn",nocase; classtype:attempted-recon; sid:200005707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.nangkong.com.cn",nocase; classtype:attempted-recon; sid:200005708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.nashuai.com.cn",nocase; classtype:attempted-recon; sid:200005709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.nasjwj.com.cn",nocase; classtype:attempted-recon; sid:200005710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ncvkfm.com.cn",nocase; classtype:attempted-recon; sid:200005711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.nenshao.com.cn",nocase; classtype:attempted-recon; sid:200005712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.newdate.com.cn",nocase; classtype:attempted-recon; sid:200005713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.niaodiao.com.cn",nocase; classtype:attempted-recon; sid:200005714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.nljprmjk.com.cn",nocase; classtype:attempted-recon; sid:200005715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.nmhoi6c1.com.cn",nocase; classtype:attempted-recon; sid:200005716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.nmok1lw.com.cn",nocase; classtype:attempted-recon; sid:200005717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.noikia.com.cn",nocase; classtype:attempted-recon; sid:200005718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.nongceng.com.cn",nocase; classtype:attempted-recon; sid:200005719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.nongzong.com.cn",nocase; classtype:attempted-recon; sid:200005720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.onlymaya.com.cn",nocase; classtype:attempted-recon; sid:200005721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.onlysun.com.cn",nocase; classtype:attempted-recon; sid:200005722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.pabw6yo.com.cn",nocase; classtype:attempted-recon; sid:200005723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.pangzhuo.com.cn",nocase; classtype:attempted-recon; sid:200005724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.pocketpc.com.cn",nocase; classtype:attempted-recon; sid:200005725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.qinghetea.com.cn",nocase; classtype:attempted-recon; sid:200005726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.rl04odcl.com.cn",nocase; classtype:attempted-recon; sid:200005727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.rstudio.com.cn",nocase; classtype:attempted-recon; sid:200005728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.s85zlc2.com.cn",nocase; classtype:attempted-recon; sid:200005729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.saichuo.com.cn",nocase; classtype:attempted-recon; sid:200005730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.shuailiao.com.cn",nocase; classtype:attempted-recon; sid:200005731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.shuanpeng.com.cn",nocase; classtype:attempted-recon; sid:200005732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.simante.com.cn",nocase; classtype:attempted-recon; sid:200005733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.sl-motor.com.cn",nocase; classtype:attempted-recon; sid:200005734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.snowtiger.com.cn",nocase; classtype:attempted-recon; sid:200005735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.songnuan.com.cn",nocase; classtype:attempted-recon; sid:200005736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.t1egk637.com.cn",nocase; classtype:attempted-recon; sid:200005737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.t9jw5b0f.com.cn",nocase; classtype:attempted-recon; sid:200005738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.tglmer.com.cn",nocase; classtype:attempted-recon; sid:200005739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.theraplex.com.cn",nocase; classtype:attempted-recon; sid:200005740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.tiffki.com.cn",nocase; classtype:attempted-recon; sid:200005741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.tjzlhzj.com.cn",nocase; classtype:attempted-recon; sid:200005742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.trip4u.com.cn",nocase; classtype:attempted-recon; sid:200005743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.tugjqs.com.cn",nocase; classtype:attempted-recon; sid:200005744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.tushu010.com.cn",nocase; classtype:attempted-recon; sid:200005745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.tzom4nab.com.cn",nocase; classtype:attempted-recon; sid:200005746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.uxgzqnx.com.cn",nocase; classtype:attempted-recon; sid:200005747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.uxmbaiy.com.cn",nocase; classtype:attempted-recon; sid:200005748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.v8muscle.com.cn",nocase; classtype:attempted-recon; sid:200005749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.vpzllll.com.cn",nocase; classtype:attempted-recon; sid:200005750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.vswaokn.com.cn",nocase; classtype:attempted-recon; sid:200005751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.vxtvufu.com.cn",nocase; classtype:attempted-recon; sid:200005752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.waizong.com.cn",nocase; classtype:attempted-recon; sid:200005753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.wdtjwo86.com.cn",nocase; classtype:attempted-recon; sid:200005754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.weiseng.com.cn",nocase; classtype:attempted-recon; sid:200005755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.wengniao.com.cn",nocase; classtype:attempted-recon; sid:200005756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.woboshi.com.cn",nocase; classtype:attempted-recon; sid:200005757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ws-f.com.cn",nocase; classtype:attempted-recon; sid:200005758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.wtp017fn.com.cn",nocase; classtype:attempted-recon; sid:200005759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.wuxiaozhu.com.cn",nocase; classtype:attempted-recon; sid:200005760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.x140le.com.cn",nocase; classtype:attempted-recon; sid:200005761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.xiashua.com.cn",nocase; classtype:attempted-recon; sid:200005762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.xiesui.com.cn",nocase; classtype:attempted-recon; sid:200005763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.xyekod.com.cn",nocase; classtype:attempted-recon; sid:200005764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.y9j1sctf.com.cn",nocase; classtype:attempted-recon; sid:200005765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.yhzjw7.com.cn",nocase; classtype:attempted-recon; sid:200005766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.yimingedu.com.cn",nocase; classtype:attempted-recon; sid:200005767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.yishuboli.com.cn",nocase; classtype:attempted-recon; sid:200005768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ylfapiao.com.cn",nocase; classtype:attempted-recon; sid:200005769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ynak4890.com.cn",nocase; classtype:attempted-recon; sid:200005770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.zaicha.com.cn",nocase; classtype:attempted-recon; sid:200005771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.zhaizhe.com.cn",nocase; classtype:attempted-recon; sid:200005772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.zhengshao.com.cn",nocase; classtype:attempted-recon; sid:200005773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.zoudang.com.cn",nocase; classtype:attempted-recon; sid:200005774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.0571pf.com.cn",nocase; classtype:attempted-recon; sid:200005775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.1kaca8n.com.cn",nocase; classtype:attempted-recon; sid:200005776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.2009mp3.com.cn",nocase; classtype:attempted-recon; sid:200005777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.24pl5id2.com.cn",nocase; classtype:attempted-recon; sid:200005778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.258448.com.cn",nocase; classtype:attempted-recon; sid:200005779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.2rf7hec9.com.cn",nocase; classtype:attempted-recon; sid:200005780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.2rml4wyj.com.cn",nocase; classtype:attempted-recon; sid:200005781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.3rdeye.com.cn",nocase; classtype:attempted-recon; sid:200005782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.467tuligo.com.cn",nocase; classtype:attempted-recon; sid:200005783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.4j7rdtcl.com.cn",nocase; classtype:attempted-recon; sid:200005784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.51cpjm.com.cn",nocase; classtype:attempted-recon; sid:200005785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.51plan.com.cn",nocase; classtype:attempted-recon; sid:200005786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.5ltzg4l.com.cn",nocase; classtype:attempted-recon; sid:200005787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.62omc5cj.com.cn",nocase; classtype:attempted-recon; sid:200005788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.68cajhh2.com.cn",nocase; classtype:attempted-recon; sid:200005789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.6ei2p4y1.com.cn",nocase; classtype:attempted-recon; sid:200005790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.771125.com.cn",nocase; classtype:attempted-recon; sid:200005791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.7lmg8cf2.com.cn",nocase; classtype:attempted-recon; sid:200005792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.7nydmjms.com.cn",nocase; classtype:attempted-recon; sid:200005793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.94wbag4w.com.cn",nocase; classtype:attempted-recon; sid:200005794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.96a2lk5h.com.cn",nocase; classtype:attempted-recon; sid:200005795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.97da6sel.com.cn",nocase; classtype:attempted-recon; sid:200005796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.99zixue.com.cn",nocase; classtype:attempted-recon; sid:200005797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.9pa4c7kf.com.cn",nocase; classtype:attempted-recon; sid:200005798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.adopen.com.cn",nocase; classtype:attempted-recon; sid:200005799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.aibihua.com.cn",nocase; classtype:attempted-recon; sid:200005800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ajecm40.com.cn",nocase; classtype:attempted-recon; sid:200005801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.americar.com.cn",nocase; classtype:attempted-recon; sid:200005802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.anmg74.com.cn",nocase; classtype:attempted-recon; sid:200005803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.anmg93.com.cn",nocase; classtype:attempted-recon; sid:200005804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.anmg95.com.cn",nocase; classtype:attempted-recon; sid:200005805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.awy52gc.com.cn",nocase; classtype:attempted-recon; sid:200005806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.beatle.com.cn",nocase; classtype:attempted-recon; sid:200005807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.bengkuan.com.cn",nocase; classtype:attempted-recon; sid:200005808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.biepie.com.cn",nocase; classtype:attempted-recon; sid:200005809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.biotope.com.cn",nocase; classtype:attempted-recon; sid:200005810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.bjdaohang.com.cn",nocase; classtype:attempted-recon; sid:200005811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.bluelaser.com.cn",nocase; classtype:attempted-recon; sid:200005812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.c6a7km15.com.cn",nocase; classtype:attempted-recon; sid:200005813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.caochui.com.cn",nocase; classtype:attempted-recon; sid:200005814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.cdchenlu.com.cn",nocase; classtype:attempted-recon; sid:200005815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.cenben.com.cn",nocase; classtype:attempted-recon; sid:200005816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.cengce.com.cn",nocase; classtype:attempted-recon; sid:200005817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.cengcou.com.cn",nocase; classtype:attempted-recon; sid:200005818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.chaikuai.com.cn",nocase; classtype:attempted-recon; sid:200005819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.chaoah.com.cn",nocase; classtype:attempted-recon; sid:200005820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.chonlon.com.cn",nocase; classtype:attempted-recon; sid:200005821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.chuoyong.com.cn",nocase; classtype:attempted-recon; sid:200005822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.city-114.com.cn",nocase; classtype:attempted-recon; sid:200005823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.commtown.com.cn",nocase; classtype:attempted-recon; sid:200005824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.cosmoveda.com.cn",nocase; classtype:attempted-recon; sid:200005825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.cpvuenr.com.cn",nocase; classtype:attempted-recon; sid:200005826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.cxqingxi.com.cn",nocase; classtype:attempted-recon; sid:200005827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.cz9s5fe.com.cn",nocase; classtype:attempted-recon; sid:200005828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.dapenti.com.cn",nocase; classtype:attempted-recon; sid:200005829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.dascrede.com.cn",nocase; classtype:attempted-recon; sid:200005830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.dbcdpnq.com.cn",nocase; classtype:attempted-recon; sid:200005831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.dz5e4pdb.com.cn",nocase; classtype:attempted-recon; sid:200005832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.dzcfpx.com.cn",nocase; classtype:attempted-recon; sid:200005833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.e-ara.com.cn",nocase; classtype:attempted-recon; sid:200005834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.eczifkk8.com.cn",nocase; classtype:attempted-recon; sid:200005835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ekwjci.com.cn",nocase; classtype:attempted-recon; sid:200005836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.exlrtf.com.cn",nocase; classtype:attempted-recon; sid:200005837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.fanzuan.com.cn",nocase; classtype:attempted-recon; sid:200005838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.fchzjdlo.com.cn",nocase; classtype:attempted-recon; sid:200005839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ffffound.com.cn",nocase; classtype:attempted-recon; sid:200005840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.findsky.com.cn",nocase; classtype:attempted-recon; sid:200005841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.gesbjzrc.com.cn",nocase; classtype:attempted-recon; sid:200005842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.gjijjdo.com.cn",nocase; classtype:attempted-recon; sid:200005843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.goshico.com.cn",nocase; classtype:attempted-recon; sid:200005844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.guabiao.com.cn",nocase; classtype:attempted-recon; sid:200005845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.gungou.com.cn",nocase; classtype:attempted-recon; sid:200005846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.gzhuilong.com.cn",nocase; classtype:attempted-recon; sid:200005847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.hanyimg.com.cn",nocase; classtype:attempted-recon; sid:200005848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.hbixwjd.com.cn",nocase; classtype:attempted-recon; sid:200005849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.henchui.com.cn",nocase; classtype:attempted-recon; sid:200005850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.hmzoye.com.cn",nocase; classtype:attempted-recon; sid:200005851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.hnhyxy.com.cn",nocase; classtype:attempted-recon; sid:200005852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.hotfax.com.cn",nocase; classtype:attempted-recon; sid:200005853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.huaihun.com.cn",nocase; classtype:attempted-recon; sid:200005854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.huanzhuan.com.cn",nocase; classtype:attempted-recon; sid:200005855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.hwblfwzy.com.cn",nocase; classtype:attempted-recon; sid:200005856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ifj2n1zk.com.cn",nocase; classtype:attempted-recon; sid:200005857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ig9sez43.com.cn",nocase; classtype:attempted-recon; sid:200005858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.iit-abs.com.cn",nocase; classtype:attempted-recon; sid:200005859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.in-me.com.cn",nocase; classtype:attempted-recon; sid:200005860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.jianjule.com.cn",nocase; classtype:attempted-recon; sid:200005861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.jiqingba.com.cn",nocase; classtype:attempted-recon; sid:200005862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.jldele168.com.cn",nocase; classtype:attempted-recon; sid:200005863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.jpt5dfae.com.cn",nocase; classtype:attempted-recon; sid:200005864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.jwdbxg.com.cn",nocase; classtype:attempted-recon; sid:200005865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.kaoruo.com.cn",nocase; classtype:attempted-recon; sid:200005866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.kinoptik.com.cn",nocase; classtype:attempted-recon; sid:200005867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.kmjsk.com.cn",nocase; classtype:attempted-recon; sid:200005868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.knwwzd8w.com.cn",nocase; classtype:attempted-recon; sid:200005869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.land-sky.com.cn",nocase; classtype:attempted-recon; sid:200005870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.laohuji8.com.cn",nocase; classtype:attempted-recon; sid:200005871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.leishuan.com.cn",nocase; classtype:attempted-recon; sid:200005872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.lingzuier.com.cn",nocase; classtype:attempted-recon; sid:200005873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.lintuo.com.cn",nocase; classtype:attempted-recon; sid:200005874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.liupen.com.cn",nocase; classtype:attempted-recon; sid:200005875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ljnnfx.com.cn",nocase; classtype:attempted-recon; sid:200005876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.longrang.com.cn",nocase; classtype:attempted-recon; sid:200005877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.luanzhi.com.cn",nocase; classtype:attempted-recon; sid:200005878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.lygclean.com.cn",nocase; classtype:attempted-recon; sid:200005879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.lyrlzy.com.cn",nocase; classtype:attempted-recon; sid:200005880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.m806h5p8.com.cn",nocase; classtype:attempted-recon; sid:200005881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.masang.com.cn",nocase; classtype:attempted-recon; sid:200005882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.menduimen.com.cn",nocase; classtype:attempted-recon; sid:200005883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.moshuai.com.cn",nocase; classtype:attempted-recon; sid:200005884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.mycarz.com.cn",nocase; classtype:attempted-recon; sid:200005885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.n45piai5.com.cn",nocase; classtype:attempted-recon; sid:200005886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.na1p4wo0.com.cn",nocase; classtype:attempted-recon; sid:200005887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.nangrun.com.cn",nocase; classtype:attempted-recon; sid:200005888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.nashuai.com.cn",nocase; classtype:attempted-recon; sid:200005889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ncvkfm.com.cn",nocase; classtype:attempted-recon; sid:200005890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.nenfou.com.cn",nocase; classtype:attempted-recon; sid:200005891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.nenghun.com.cn",nocase; classtype:attempted-recon; sid:200005892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.nenshao.com.cn",nocase; classtype:attempted-recon; sid:200005893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.niaodiao.com.cn",nocase; classtype:attempted-recon; sid:200005894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.niaoshuai.com.cn",nocase; classtype:attempted-recon; sid:200005895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.njanrui.com.cn",nocase; classtype:attempted-recon; sid:200005896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.nljprmjk.com.cn",nocase; classtype:attempted-recon; sid:200005897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.noikia.com.cn",nocase; classtype:attempted-recon; sid:200005898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.nongceng.com.cn",nocase; classtype:attempted-recon; sid:200005899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.nongzong.com.cn",nocase; classtype:attempted-recon; sid:200005900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.o2ospace.com.cn",nocase; classtype:attempted-recon; sid:200005901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.onetrip.com.cn",nocase; classtype:attempted-recon; sid:200005902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.onlymaya.com.cn",nocase; classtype:attempted-recon; sid:200005903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.pabw6yo.com.cn",nocase; classtype:attempted-recon; sid:200005904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.pangzhuo.com.cn",nocase; classtype:attempted-recon; sid:200005905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.pocketpc.com.cn",nocase; classtype:attempted-recon; sid:200005906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.pzcwk0j.com.cn",nocase; classtype:attempted-recon; sid:200005907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.qicheye.com.cn",nocase; classtype:attempted-recon; sid:200005908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.qinghetea.com.cn",nocase; classtype:attempted-recon; sid:200005909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.qiongran.com.cn",nocase; classtype:attempted-recon; sid:200005910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.rstudio.com.cn",nocase; classtype:attempted-recon; sid:200005911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ruanlue.com.cn",nocase; classtype:attempted-recon; sid:200005912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ruogan.com.cn",nocase; classtype:attempted-recon; sid:200005913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.rwbwdeca.com.cn",nocase; classtype:attempted-recon; sid:200005914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.rxjh4f.com.cn",nocase; classtype:attempted-recon; sid:200005915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.satour.com.cn",nocase; classtype:attempted-recon; sid:200005916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.sechuang.com.cn",nocase; classtype:attempted-recon; sid:200005917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.shuailiao.com.cn",nocase; classtype:attempted-recon; sid:200005918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.simante.com.cn",nocase; classtype:attempted-recon; sid:200005919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.sl-motor.com.cn",nocase; classtype:attempted-recon; sid:200005920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.sondaflex.com.cn",nocase; classtype:attempted-recon; sid:200005921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.songnuan.com.cn",nocase; classtype:attempted-recon; sid:200005922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.soujiong.com.cn",nocase; classtype:attempted-recon; sid:200005923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.soutie.com.cn",nocase; classtype:attempted-recon; sid:200005924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.sunroys.com.cn",nocase; classtype:attempted-recon; sid:200005925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.t9jw5b0f.com.cn",nocase; classtype:attempted-recon; sid:200005926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.tcyn6mf.com.cn",nocase; classtype:attempted-recon; sid:200005927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.tglmer.com.cn",nocase; classtype:attempted-recon; sid:200005928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.theraplex.com.cn",nocase; classtype:attempted-recon; sid:200005929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.tiffki.com.cn",nocase; classtype:attempted-recon; sid:200005930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.topdpd.com.cn",nocase; classtype:attempted-recon; sid:200005931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.trip4u.com.cn",nocase; classtype:attempted-recon; sid:200005932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.tugjqs.com.cn",nocase; classtype:attempted-recon; sid:200005933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.tuopiji.com.cn",nocase; classtype:attempted-recon; sid:200005934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.tushu010.com.cn",nocase; classtype:attempted-recon; sid:200005935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.tydfblog.com.cn",nocase; classtype:attempted-recon; sid:200005936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.tyehl2ma.com.cn",nocase; classtype:attempted-recon; sid:200005937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.tzom4nab.com.cn",nocase; classtype:attempted-recon; sid:200005938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.uxmbaiy.com.cn",nocase; classtype:attempted-recon; sid:200005939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.vpzllll.com.cn",nocase; classtype:attempted-recon; sid:200005940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.vyiqjfc.com.cn",nocase; classtype:attempted-recon; sid:200005941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.waizong.com.cn",nocase; classtype:attempted-recon; sid:200005942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.wengniao.com.cn",nocase; classtype:attempted-recon; sid:200005943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.wmfoankc.com.cn",nocase; classtype:attempted-recon; sid:200005944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.woboshi.com.cn",nocase; classtype:attempted-recon; sid:200005945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ws-f.com.cn",nocase; classtype:attempted-recon; sid:200005946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.wtp017fn.com.cn",nocase; classtype:attempted-recon; sid:200005947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.wuxiaozhu.com.cn",nocase; classtype:attempted-recon; sid:200005948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.x140le.com.cn",nocase; classtype:attempted-recon; sid:200005949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.xiashua.com.cn",nocase; classtype:attempted-recon; sid:200005950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.xiesui.com.cn",nocase; classtype:attempted-recon; sid:200005951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.xyekod.com.cn",nocase; classtype:attempted-recon; sid:200005952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.yhzjw7.com.cn",nocase; classtype:attempted-recon; sid:200005953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.yimingedu.com.cn",nocase; classtype:attempted-recon; sid:200005954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.yishuboli.com.cn",nocase; classtype:attempted-recon; sid:200005955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ym8i2wmc.com.cn",nocase; classtype:attempted-recon; sid:200005956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.ynak4890.com.cn",nocase; classtype:attempted-recon; sid:200005957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.yuezhun.com.cn",nocase; classtype:attempted-recon; sid:200005958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.zaicha.com.cn",nocase; classtype:attempted-recon; sid:200005959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.zhaizhe.com.cn",nocase; classtype:attempted-recon; sid:200005960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.zhengshao.com.cn",nocase; classtype:attempted-recon; sid:200005961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.zhounen.com.cn",nocase; classtype:attempted-recon; sid:200005962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.zhuanniao.com.cn",nocase; classtype:attempted-recon; sid:200005963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.zonlc8yo.com.cn",nocase; classtype:attempted-recon; sid:200005964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.zoudang.com.cn",nocase; classtype:attempted-recon; sid:200005965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mapos.us",nocase; classtype:attempted-recon; sid:200005966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mapsa.com.pe",nocase; classtype:attempted-recon; sid:200005967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marachimiller.com",nocase; classtype:attempted-recon; sid:200005968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marginplus.com.au",nocase; classtype:attempted-recon; sid:200005969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma1.web.app",nocase; classtype:attempted-recon; sid:200005971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma10.web.app",nocase; classtype:attempted-recon; sid:200005973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma11.web.app",nocase; classtype:attempted-recon; sid:200005975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma12.web.app",nocase; classtype:attempted-recon; sid:200005977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma13.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma13.web.app",nocase; classtype:attempted-recon; sid:200005979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma14.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma14.web.app",nocase; classtype:attempted-recon; sid:200005981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma15.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma15.web.app",nocase; classtype:attempted-recon; sid:200005983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma16.web.app",nocase; classtype:attempted-recon; sid:200005985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma17.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma17.web.app",nocase; classtype:attempted-recon; sid:200005987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma18.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma18.web.app",nocase; classtype:attempted-recon; sid:200005989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma19.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma19.web.app",nocase; classtype:attempted-recon; sid:200005991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma2.web.app",nocase; classtype:attempted-recon; sid:200005993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma20.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma20.web.app",nocase; classtype:attempted-recon; sid:200005995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma21.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma21.web.app",nocase; classtype:attempted-recon; sid:200005997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma22.firebaseapp.com",nocase; classtype:attempted-recon; sid:200005998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma22.web.app",nocase; classtype:attempted-recon; sid:200005999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma23.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma23.web.app",nocase; classtype:attempted-recon; sid:200006001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma24.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma24.web.app",nocase; classtype:attempted-recon; sid:200006003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma25.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma25.web.app",nocase; classtype:attempted-recon; sid:200006005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma26.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma26.web.app",nocase; classtype:attempted-recon; sid:200006007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma27.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma27.web.app",nocase; classtype:attempted-recon; sid:200006009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma28.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma28.web.app",nocase; classtype:attempted-recon; sid:200006011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma29.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma29.web.app",nocase; classtype:attempted-recon; sid:200006013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma3.web.app",nocase; classtype:attempted-recon; sid:200006015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma30.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma30.web.app",nocase; classtype:attempted-recon; sid:200006017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma31.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma31.web.app",nocase; classtype:attempted-recon; sid:200006019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma4.web.app",nocase; classtype:attempted-recon; sid:200006021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma5.web.app",nocase; classtype:attempted-recon; sid:200006023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma6.web.app",nocase; classtype:attempted-recon; sid:200006025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma7.web.app",nocase; classtype:attempted-recon; sid:200006027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinatedma8.web.app",nocase; classtype:attempted-recon; sid:200006029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinoceans.cam",nocase; classtype:attempted-recon; sid:200006030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marinsu.com.tr",nocase; classtype:attempted-recon; sid:200006031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"market-mcsgo.ru",nocase; classtype:attempted-recon; sid:200006032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketplace-axieinfinity.io",nocase; classtype:attempted-recon; sid:200006033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketplace.axieinflinity.io",nocase; classtype:attempted-recon; sid:200006034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marketplacelnfinytlaxi.com",nocase; classtype:attempted-recon; sid:200006035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"markos.cc",nocase; classtype:attempted-recon; sid:200006036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"marlonmedia.de",nocase; classtype:attempted-recon; sid:200006037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masccsorod.asosscemend.68cajhh2.com.cn",nocase; classtype:attempted-recon; sid:200006038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masccsorod.asosscemend.anmg61.com.cn",nocase; classtype:attempted-recon; sid:200006039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masccsorod.asosscemend.cscdma.com.cn",nocase; classtype:attempted-recon; sid:200006040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masccsorod.asosscemend.ghnclwyp.com.cn",nocase; classtype:attempted-recon; sid:200006041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masccsorod.asosscemend.nvpian.com.cn",nocase; classtype:attempted-recon; sid:200006042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masccsorod.asosscemend.woboshi.com.cn",nocase; classtype:attempted-recon; sid:200006043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masccsorod.asosscemend.yishuboli.com.cn",nocase; classtype:attempted-recon; sid:200006044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masccsorod.asosscemend.ylfapiao.com.cn",nocase; classtype:attempted-recon; sid:200006045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesscssserd.aaosaeasmansnerd.rgiclw.top",nocase; classtype:attempted-recon; sid:200006046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesscssserd.aaosaeasmansnerd.rusnrh.top",nocase; classtype:attempted-recon; sid:200006047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesscssserd.aaosaeasmansnerd.rxiarn.top",nocase; classtype:attempted-recon; sid:200006048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesscssserd.aaosaeasmansnerd.tcpgpg.top",nocase; classtype:attempted-recon; sid:200006049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesscssserd.aaosaeasmansnerd.tsqcxg.top",nocase; classtype:attempted-recon; sid:200006050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesscssserd.aaosaeasmansnerd.txxbks.top",nocase; classtype:attempted-recon; sid:200006051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesscssserd.aaosaeasmansnerd.uasxxj.top",nocase; classtype:attempted-recon; sid:200006052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesscssserd.aaosaeasmansnerd.uviayc.top",nocase; classtype:attempted-recon; sid:200006053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesscssserd.aaosaeasmansnerd.wdzxnt.top",nocase; classtype:attempted-recon; sid:200006054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesssserd.aaosmsaansnerd.rgiclw.top",nocase; classtype:attempted-recon; sid:200006055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesssserd.aaosmsaansnerd.rhxhhg.top",nocase; classtype:attempted-recon; sid:200006056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesssserd.aaosmsaansnerd.tglthh.top",nocase; classtype:attempted-recon; sid:200006057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesssserd.aaosmsaansnerd.trxpth.top",nocase; classtype:attempted-recon; sid:200006058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesssserd.aaosmsaansnerd.txwlxg.top",nocase; classtype:attempted-recon; sid:200006059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesssserd.aaosmsaansnerd.tzmndc.top",nocase; classtype:attempted-recon; sid:200006060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascesssserd.aaosmsaansnerd.uisvoo.top",nocase; classtype:attempted-recon; sid:200006061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.rezkdk.top",nocase; classtype:attempted-recon; sid:200006062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.rgiclw.top",nocase; classtype:attempted-recon; sid:200006063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.rlyndd.top",nocase; classtype:attempted-recon; sid:200006064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.rwgjyb.top",nocase; classtype:attempted-recon; sid:200006065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.rxiarn.top",nocase; classtype:attempted-recon; sid:200006066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.sscssr.top",nocase; classtype:attempted-recon; sid:200006067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.tciheh.top",nocase; classtype:attempted-recon; sid:200006068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.tcpgpg.top",nocase; classtype:attempted-recon; sid:200006069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.tglthh.top",nocase; classtype:attempted-recon; sid:200006070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.tlljjk.top",nocase; classtype:attempted-recon; sid:200006071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.tqeeuz.top",nocase; classtype:attempted-recon; sid:200006072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.trxpth.top",nocase; classtype:attempted-recon; sid:200006073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.tsqcxg.top",nocase; classtype:attempted-recon; sid:200006074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.txvcqg.top",nocase; classtype:attempted-recon; sid:200006075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.tzmndc.top",nocase; classtype:attempted-recon; sid:200006076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.uhojoz.top",nocase; classtype:attempted-recon; sid:200006077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.uisvoo.top",nocase; classtype:attempted-recon; sid:200006078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.updcan.top",nocase; classtype:attempted-recon; sid:200006079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.uudnmz.top",nocase; classtype:attempted-recon; sid:200006080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.uviayc.top",nocase; classtype:attempted-recon; sid:200006081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.uxhejc.top",nocase; classtype:attempted-recon; sid:200006082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascscssserd.aaoeasmansnerd.wdzxnt.top",nocase; classtype:attempted-recon; sid:200006083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.12530a.com.cn",nocase; classtype:attempted-recon; sid:200006084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.1jiajia.com.cn",nocase; classtype:attempted-recon; sid:200006085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.1kaca8n.com.cn",nocase; classtype:attempted-recon; sid:200006086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.1pmc6awo.com.cn",nocase; classtype:attempted-recon; sid:200006087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.258448.com.cn",nocase; classtype:attempted-recon; sid:200006088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.2rf7hec9.com.cn",nocase; classtype:attempted-recon; sid:200006089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.2taoke.com.cn",nocase; classtype:attempted-recon; sid:200006090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.4j7rdtcl.com.cn",nocase; classtype:attempted-recon; sid:200006091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.68cajhh2.com.cn",nocase; classtype:attempted-recon; sid:200006092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.99zixue.com.cn",nocase; classtype:attempted-recon; sid:200006093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.led-drive.com.cn",nocase; classtype:attempted-recon; sid:200006094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.ms6p7zd1.com.cn",nocase; classtype:attempted-recon; sid:200006095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.n4a1ab3k.com.cn",nocase; classtype:attempted-recon; sid:200006096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsord.asosmend.ncvkfm.com.cn",nocase; classtype:attempted-recon; sid:200006097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.020jeans.com.cn",nocase; classtype:attempted-recon; sid:200006098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.0571ol.com.cn",nocase; classtype:attempted-recon; sid:200006099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.07jmpe0s.com.cn",nocase; classtype:attempted-recon; sid:200006100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.1gpmre27.com.cn",nocase; classtype:attempted-recon; sid:200006101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.21vita.com.cn",nocase; classtype:attempted-recon; sid:200006102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.2ywg0lcs.com.cn",nocase; classtype:attempted-recon; sid:200006103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.48irel3a.com.cn",nocase; classtype:attempted-recon; sid:200006104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.4f8ajk5a.com.cn",nocase; classtype:attempted-recon; sid:200006105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.52flash.com.cn",nocase; classtype:attempted-recon; sid:200006106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.5fj8w6dw.com.cn",nocase; classtype:attempted-recon; sid:200006107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.668trip.com.cn",nocase; classtype:attempted-recon; sid:200006108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.70rbpel8.com.cn",nocase; classtype:attempted-recon; sid:200006109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.82cm90eo.com.cn",nocase; classtype:attempted-recon; sid:200006110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.8z65bngs.com.cn",nocase; classtype:attempted-recon; sid:200006111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.9hks0gzd.com.cn",nocase; classtype:attempted-recon; sid:200006112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.9t80yk5l.com.cn",nocase; classtype:attempted-recon; sid:200006113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.aahrsk.com.cn",nocase; classtype:attempted-recon; sid:200006114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.abraxas.com.cn",nocase; classtype:attempted-recon; sid:200006115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.ahkusa.com.cn",nocase; classtype:attempted-recon; sid:200006116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.ai8cswyc.com.cn",nocase; classtype:attempted-recon; sid:200006117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.ainijun.com.cn",nocase; classtype:attempted-recon; sid:200006118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.amoe690p.com.cn",nocase; classtype:attempted-recon; sid:200006119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.anmg56.com.cn",nocase; classtype:attempted-recon; sid:200006120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.annrdzd.com.cn",nocase; classtype:attempted-recon; sid:200006121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.ansystem.com.cn",nocase; classtype:attempted-recon; sid:200006122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.aqh27.com.cn",nocase; classtype:attempted-recon; sid:200006123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.aywc4c0d.com.cn",nocase; classtype:attempted-recon; sid:200006124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.bbbjdq.com.cn",nocase; classtype:attempted-recon; sid:200006125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.bengkai.com.cn",nocase; classtype:attempted-recon; sid:200006126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.bfxk1107.com.cn",nocase; classtype:attempted-recon; sid:200006127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.bjbyby.com.cn",nocase; classtype:attempted-recon; sid:200006128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.c8mnem0w.com.cn",nocase; classtype:attempted-recon; sid:200006129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.cangceng.com.cn",nocase; classtype:attempted-recon; sid:200006130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.caorao.com.cn",nocase; classtype:attempted-recon; sid:200006131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.ccrvpd.com.cn",nocase; classtype:attempted-recon; sid:200006132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.cenghuang.com.cn",nocase; classtype:attempted-recon; sid:200006133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.cengkuo.com.cn",nocase; classtype:attempted-recon; sid:200006134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.cengzhe.com.cn",nocase; classtype:attempted-recon; sid:200006135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.centong.com.cn",nocase; classtype:attempted-recon; sid:200006136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.chuandou.com.cn",nocase; classtype:attempted-recon; sid:200006137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.chunou.com.cn",nocase; classtype:attempted-recon; sid:200006138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.citygold.com.cn",nocase; classtype:attempted-recon; sid:200006139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.cocopos.com.cn",nocase; classtype:attempted-recon; sid:200006140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.djblcbay.com.cn",nocase; classtype:attempted-recon; sid:200006141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.dongkao.com.cn",nocase; classtype:attempted-recon; sid:200006142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.double-e.com.cn",nocase; classtype:attempted-recon; sid:200006143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.dunping.com.cn",nocase; classtype:attempted-recon; sid:200006144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.duozhua.com.cn",nocase; classtype:attempted-recon; sid:200006145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.dylwkj.com.cn",nocase; classtype:attempted-recon; sid:200006146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.eb7v1l.com.cn",nocase; classtype:attempted-recon; sid:200006147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.ectmj7b.com.cn",nocase; classtype:attempted-recon; sid:200006148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.enmedj.com.cn",nocase; classtype:attempted-recon; sid:200006149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.epw7b8gn.com.cn",nocase; classtype:attempted-recon; sid:200006150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.ewmamomf.com.cn",nocase; classtype:attempted-recon; sid:200006151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.foucang.com.cn",nocase; classtype:attempted-recon; sid:200006152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.fouguo.com.cn",nocase; classtype:attempted-recon; sid:200006153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.fouteng.com.cn",nocase; classtype:attempted-recon; sid:200006154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.fsibiu.com.cn",nocase; classtype:attempted-recon; sid:200006155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.fwjl0cr.com.cn",nocase; classtype:attempted-recon; sid:200006156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.goldbeach.com.cn",nocase; classtype:attempted-recon; sid:200006157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.greenseal.com.cn",nocase; classtype:attempted-recon; sid:200006158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.h980fg34.com.cn",nocase; classtype:attempted-recon; sid:200006159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.hencang.com.cn",nocase; classtype:attempted-recon; sid:200006160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.hensuo.com.cn",nocase; classtype:attempted-recon; sid:200006161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.huaiduan.com.cn",nocase; classtype:attempted-recon; sid:200006162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.huangcui.com.cn",nocase; classtype:attempted-recon; sid:200006163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.huangqu.com.cn",nocase; classtype:attempted-recon; sid:200006164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.hznami.com.cn",nocase; classtype:attempted-recon; sid:200006165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.i-law.com.cn",nocase; classtype:attempted-recon; sid:200006166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.jdvmaa.com.cn",nocase; classtype:attempted-recon; sid:200006167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.jiangzhua.com.cn",nocase; classtype:attempted-recon; sid:200006168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.jianlue.com.cn",nocase; classtype:attempted-recon; sid:200006169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.jielue.com.cn",nocase; classtype:attempted-recon; sid:200006170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.jiuchui.com.cn",nocase; classtype:attempted-recon; sid:200006171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.jmwrlfp7.com.cn",nocase; classtype:attempted-recon; sid:200006172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.jngwkhs.com.cn",nocase; classtype:attempted-recon; sid:200006173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.jnqgjx.com.cn",nocase; classtype:attempted-recon; sid:200006174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.kangzu.com.cn",nocase; classtype:attempted-recon; sid:200006175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.kararar.com.cn",nocase; classtype:attempted-recon; sid:200006176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.kepie.com.cn",nocase; classtype:attempted-recon; sid:200006177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.kfs119.com.cn",nocase; classtype:attempted-recon; sid:200006178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.km-senge.com.cn",nocase; classtype:attempted-recon; sid:200006179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.konggan.com.cn",nocase; classtype:attempted-recon; sid:200006180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.kongze.com.cn",nocase; classtype:attempted-recon; sid:200006181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.krfocm97.com.cn",nocase; classtype:attempted-recon; sid:200006182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.kszcmcw2.com.cn",nocase; classtype:attempted-recon; sid:200006183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.ktl4a1yd.com.cn",nocase; classtype:attempted-recon; sid:200006184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.l091ezsp.com.cn",nocase; classtype:attempted-recon; sid:200006185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.langpang.com.cn",nocase; classtype:attempted-recon; sid:200006186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.lhanivo.com.cn",nocase; classtype:attempted-recon; sid:200006187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.lieding.com.cn",nocase; classtype:attempted-recon; sid:200006188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.lijun99.com.cn",nocase; classtype:attempted-recon; sid:200006189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.litoyes.com.cn",nocase; classtype:attempted-recon; sid:200006190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.lkblog.com.cn",nocase; classtype:attempted-recon; sid:200006191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.longlia.com.cn",nocase; classtype:attempted-recon; sid:200006192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.longnai.com.cn",nocase; classtype:attempted-recon; sid:200006193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.ludrus.com.cn",nocase; classtype:attempted-recon; sid:200006194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.lunluan.com.cn",nocase; classtype:attempted-recon; sid:200006195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.maozhui.com.cn",nocase; classtype:attempted-recon; sid:200006196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.mgm741.com.cn",nocase; classtype:attempted-recon; sid:200006197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.midea-sz.com.cn",nocase; classtype:attempted-recon; sid:200006198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.miningcn.com.cn",nocase; classtype:attempted-recon; sid:200006199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.miukai.com.cn",nocase; classtype:attempted-recon; sid:200006200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.moushu.com.cn",nocase; classtype:attempted-recon; sid:200006201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.music98.com.cn",nocase; classtype:attempted-recon; sid:200006202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.nakm6sc2.com.cn",nocase; classtype:attempted-recon; sid:200006203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.neatec.com.cn",nocase; classtype:attempted-recon; sid:200006204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.nengzhuo.com.cn",nocase; classtype:attempted-recon; sid:200006205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.nenmiu.com.cn",nocase; classtype:attempted-recon; sid:200006206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.nenpian.com.cn",nocase; classtype:attempted-recon; sid:200006207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.nentian.com.cn",nocase; classtype:attempted-recon; sid:200006208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.nenxuan.com.cn",nocase; classtype:attempted-recon; sid:200006209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.niushuan.com.cn",nocase; classtype:attempted-recon; sid:200006210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.njca5dzj.com.cn",nocase; classtype:attempted-recon; sid:200006211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.officetv.com.cn",nocase; classtype:attempted-recon; sid:200006212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.offlady.com.cn",nocase; classtype:attempted-recon; sid:200006213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.p5gyazta.com.cn",nocase; classtype:attempted-recon; sid:200006214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.phdisy21.com.cn",nocase; classtype:attempted-recon; sid:200006215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.power-x.com.cn",nocase; classtype:attempted-recon; sid:200006216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.qiongkui.com.cn",nocase; classtype:attempted-recon; sid:200006217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.rmtrxq.com.cn",nocase; classtype:attempted-recon; sid:200006218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.rochemall.com.cn",nocase; classtype:attempted-recon; sid:200006219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.ruodiangc.com.cn",nocase; classtype:attempted-recon; sid:200006220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.ruzhun.com.cn",nocase; classtype:attempted-recon; sid:200006221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.s7aecrtl.com.cn",nocase; classtype:attempted-recon; sid:200006222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.shhdbjgs.com.cn",nocase; classtype:attempted-recon; sid:200006223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.shruikun.com.cn",nocase; classtype:attempted-recon; sid:200006224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.sjzfyhs.com.cn",nocase; classtype:attempted-recon; sid:200006225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.sof8d4a5.com.cn",nocase; classtype:attempted-recon; sid:200006226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.suiqiong.com.cn",nocase; classtype:attempted-recon; sid:200006227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.syslynk.com.cn",nocase; classtype:attempted-recon; sid:200006228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.t8r0emhb.com.cn",nocase; classtype:attempted-recon; sid:200006229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.tb6nesmd.com.cn",nocase; classtype:attempted-recon; sid:200006230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.tj-wy.com.cn",nocase; classtype:attempted-recon; sid:200006231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.toyokuni.com.cn",nocase; classtype:attempted-recon; sid:200006232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.tuanga.com.cn",nocase; classtype:attempted-recon; sid:200006233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.viptoy.com.cn",nocase; classtype:attempted-recon; sid:200006234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.vtugoel.com.cn",nocase; classtype:attempted-recon; sid:200006235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.wang114.com.cn",nocase; classtype:attempted-recon; sid:200006236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.webside.com.cn",nocase; classtype:attempted-recon; sid:200006237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.x-heater.com.cn",nocase; classtype:attempted-recon; sid:200006238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.xinfenya.com.cn",nocase; classtype:attempted-recon; sid:200006239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.xkdibq.com.cn",nocase; classtype:attempted-recon; sid:200006240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.xtensyon.com.cn",nocase; classtype:attempted-recon; sid:200006241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.xuanwai.com.cn",nocase; classtype:attempted-recon; sid:200006242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.xvpkcx.com.cn",nocase; classtype:attempted-recon; sid:200006243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.y07gfknc.com.cn",nocase; classtype:attempted-recon; sid:200006244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.yangsuo.com.cn",nocase; classtype:attempted-recon; sid:200006245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.yaoshuang.com.cn",nocase; classtype:attempted-recon; sid:200006246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.yinsan.com.cn",nocase; classtype:attempted-recon; sid:200006247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.zaixiong.com.cn",nocase; classtype:attempted-recon; sid:200006248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.zclkwj.com.cn",nocase; classtype:attempted-recon; sid:200006249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.zglyjzl.com.cn",nocase; classtype:attempted-recon; sid:200006250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.zhaizhang.com.cn",nocase; classtype:attempted-recon; sid:200006251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.zhangnian.com.cn",nocase; classtype:attempted-recon; sid:200006252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.zuohuai.com.cn",nocase; classtype:attempted-recon; sid:200006253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.0wmh288g.com.cn",nocase; classtype:attempted-recon; sid:200006254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.17wwsf.com.cn",nocase; classtype:attempted-recon; sid:200006255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.277500.com.cn",nocase; classtype:attempted-recon; sid:200006256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.2980415.com.cn",nocase; classtype:attempted-recon; sid:200006257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.687feyac.com.cn",nocase; classtype:attempted-recon; sid:200006258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.6tb80w1j.com.cn",nocase; classtype:attempted-recon; sid:200006259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.76cjmrsa.com.cn",nocase; classtype:attempted-recon; sid:200006260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.89pkhbr2.com.cn",nocase; classtype:attempted-recon; sid:200006261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.987sip7.com.cn",nocase; classtype:attempted-recon; sid:200006262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.a598sc0k.com.cn",nocase; classtype:attempted-recon; sid:200006263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.aa2cpc7.com.cn",nocase; classtype:attempted-recon; sid:200006264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.anmg94.com.cn",nocase; classtype:attempted-recon; sid:200006265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.bqeejd.com.cn",nocase; classtype:attempted-recon; sid:200006266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.cannmedia.com.cn",nocase; classtype:attempted-recon; sid:200006267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.cengting.com.cn",nocase; classtype:attempted-recon; sid:200006268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.cengtong.com.cn",nocase; classtype:attempted-recon; sid:200006269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.cnlmm9w7.com.cn",nocase; classtype:attempted-recon; sid:200006270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.congdui.com.cn",nocase; classtype:attempted-recon; sid:200006271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.cspabik1.com.cn",nocase; classtype:attempted-recon; sid:200006272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.dh-hm.com.cn",nocase; classtype:attempted-recon; sid:200006273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.dinisi.com.cn",nocase; classtype:attempted-recon; sid:200006274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.duirang.com.cn",nocase; classtype:attempted-recon; sid:200006275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.e-sunde.com.cn",nocase; classtype:attempted-recon; sid:200006276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.enzuan.com.cn",nocase; classtype:attempted-recon; sid:200006277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.facesmile.com.cn",nocase; classtype:attempted-recon; sid:200006278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.fkihti.com.cn",nocase; classtype:attempted-recon; sid:200006279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.fousong.com.cn",nocase; classtype:attempted-recon; sid:200006280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.gongzha.com.cn",nocase; classtype:attempted-recon; sid:200006281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.gtm-m.com.cn",nocase; classtype:attempted-recon; sid:200006282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.guaian.com.cn",nocase; classtype:attempted-recon; sid:200006283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.hansor6.com.cn",nocase; classtype:attempted-recon; sid:200006284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.haotupian.com.cn",nocase; classtype:attempted-recon; sid:200006285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.hfhybh.com.cn",nocase; classtype:attempted-recon; sid:200006286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.jiongbing.com.cn",nocase; classtype:attempted-recon; sid:200006287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.jthuuuu.com.cn",nocase; classtype:attempted-recon; sid:200006288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.kasiqi.com.cn",nocase; classtype:attempted-recon; sid:200006289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.kbzfpje.com.cn",nocase; classtype:attempted-recon; sid:200006290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.lhz9r6pc.com.cn",nocase; classtype:attempted-recon; sid:200006291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.lunsuo.com.cn",nocase; classtype:attempted-recon; sid:200006292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.miangong.com.cn",nocase; classtype:attempted-recon; sid:200006293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.naofang.com.cn",nocase; classtype:attempted-recon; sid:200006294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.niaoguang.com.cn",nocase; classtype:attempted-recon; sid:200006295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.olr87do.com.cn",nocase; classtype:attempted-recon; sid:200006296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.pengdiu.com.cn",nocase; classtype:attempted-recon; sid:200006297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.pzblog.com.cn",nocase; classtype:attempted-recon; sid:200006298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.sce7ok9y.com.cn",nocase; classtype:attempted-recon; sid:200006299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.sdicif.com.cn",nocase; classtype:attempted-recon; sid:200006300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.shaw0m6h.com.cn",nocase; classtype:attempted-recon; sid:200006301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.shuazhui.com.cn",nocase; classtype:attempted-recon; sid:200006302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.sochang.com.cn",nocase; classtype:attempted-recon; sid:200006303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.st4d7h3.com.cn",nocase; classtype:attempted-recon; sid:200006304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.sz-yitong.com.cn",nocase; classtype:attempted-recon; sid:200006305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.temazu.com.cn",nocase; classtype:attempted-recon; sid:200006306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.tm-701.com.cn",nocase; classtype:attempted-recon; sid:200006307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.yahoo3721.com.cn",nocase; classtype:attempted-recon; sid:200006308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.06cmncai.com.cn",nocase; classtype:attempted-recon; sid:200006309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.0a16yw7m.com.cn",nocase; classtype:attempted-recon; sid:200006310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.6tdm5m06.com.cn",nocase; classtype:attempted-recon; sid:200006311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.7gzmmari.com.cn",nocase; classtype:attempted-recon; sid:200006312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.8e0ptyb6.com.cn",nocase; classtype:attempted-recon; sid:200006313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.aomenhua.com.cn",nocase; classtype:attempted-recon; sid:200006314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.c5bnappc.com.cn",nocase; classtype:attempted-recon; sid:200006315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.dalianmei.com.cn",nocase; classtype:attempted-recon; sid:200006316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.etmaster.com.cn",nocase; classtype:attempted-recon; sid:200006317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.f1mdeaia.com.cn",nocase; classtype:attempted-recon; sid:200006318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.f6wperp1.com.cn",nocase; classtype:attempted-recon; sid:200006319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.fczytv.com.cn",nocase; classtype:attempted-recon; sid:200006320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.founty.com.cn",nocase; classtype:attempted-recon; sid:200006321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.fw6yg0a.com.cn",nocase; classtype:attempted-recon; sid:200006322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.gangnin.com.cn",nocase; classtype:attempted-recon; sid:200006323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.greenlady.com.cn",nocase; classtype:attempted-recon; sid:200006324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.gsuyta.com.cn",nocase; classtype:attempted-recon; sid:200006325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.guaichao.com.cn",nocase; classtype:attempted-recon; sid:200006326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.gzmidea.com.cn",nocase; classtype:attempted-recon; sid:200006327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.h2mdrb92.com.cn",nocase; classtype:attempted-recon; sid:200006328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.handier.com.cn",nocase; classtype:attempted-recon; sid:200006329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.haozen.com.cn",nocase; classtype:attempted-recon; sid:200006330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.hblongtu.com.cn",nocase; classtype:attempted-recon; sid:200006331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.igtfvr.com.cn",nocase; classtype:attempted-recon; sid:200006332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.jiongzong.com.cn",nocase; classtype:attempted-recon; sid:200006333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.kairao.com.cn",nocase; classtype:attempted-recon; sid:200006334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.kaspresky.com.cn",nocase; classtype:attempted-recon; sid:200006335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.kidsshoes.com.cn",nocase; classtype:attempted-recon; sid:200006336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.kthxty.com.cn",nocase; classtype:attempted-recon; sid:200006337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.laijiong.com.cn",nocase; classtype:attempted-recon; sid:200006338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.luqiong.com.cn",nocase; classtype:attempted-recon; sid:200006339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.lvdfpl3.com.cn",nocase; classtype:attempted-recon; sid:200006340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.mianmou.com.cn",nocase; classtype:attempted-recon; sid:200006341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.minshao.com.cn",nocase; classtype:attempted-recon; sid:200006342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.mtspyx.com.cn",nocase; classtype:attempted-recon; sid:200006343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.mtyttjc.com.cn",nocase; classtype:attempted-recon; sid:200006344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.nenshuai.com.cn",nocase; classtype:attempted-recon; sid:200006345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.pclearner.com.cn",nocase; classtype:attempted-recon; sid:200006346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.sar9my9m.com.cn",nocase; classtype:attempted-recon; sid:200006347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.sfepay.com.cn",nocase; classtype:attempted-recon; sid:200006348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.sholay.com.cn",nocase; classtype:attempted-recon; sid:200006349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.sikafu.com.cn",nocase; classtype:attempted-recon; sid:200006350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.whship.com.cn",nocase; classtype:attempted-recon; sid:200006351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.willhong.com.cn",nocase; classtype:attempted-recon; sid:200006352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.xiuqia.com.cn",nocase; classtype:attempted-recon; sid:200006353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.yaopiao.com.cn",nocase; classtype:attempted-recon; sid:200006354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.yasndwjz.com.cn",nocase; classtype:attempted-recon; sid:200006355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.rcapss.top",nocase; classtype:attempted-recon; sid:200006356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.rezkdk.top",nocase; classtype:attempted-recon; sid:200006357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.roiysf.top",nocase; classtype:attempted-recon; sid:200006358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.rtpmvr.top",nocase; classtype:attempted-recon; sid:200006359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.rxiarn.top",nocase; classtype:attempted-recon; sid:200006360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.sscssr.top",nocase; classtype:attempted-recon; sid:200006361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.swdfkn.top",nocase; classtype:attempted-recon; sid:200006362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.tciheh.top",nocase; classtype:attempted-recon; sid:200006363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.tcpgpg.top",nocase; classtype:attempted-recon; sid:200006364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.tkozlg.top",nocase; classtype:attempted-recon; sid:200006365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.tqsnfg.top",nocase; classtype:attempted-recon; sid:200006366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.tvqwui.top",nocase; classtype:attempted-recon; sid:200006367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.twjzsc.top",nocase; classtype:attempted-recon; sid:200006368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.txvcqg.top",nocase; classtype:attempted-recon; sid:200006369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.txwlxg.top",nocase; classtype:attempted-recon; sid:200006370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.txxbks.top",nocase; classtype:attempted-recon; sid:200006371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.tzmndc.top",nocase; classtype:attempted-recon; sid:200006372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.uijamm.top",nocase; classtype:attempted-recon; sid:200006373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.uviayc.top",nocase; classtype:attempted-recon; sid:200006374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.uxhejc.top",nocase; classtype:attempted-recon; sid:200006375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.vaylqb.top",nocase; classtype:attempted-recon; sid:200006376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.vthjig.top",nocase; classtype:attempted-recon; sid:200006377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascssserd.aaosmansnerd.whsjcd.top",nocase; classtype:attempted-recon; sid:200006378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"massasenoermsrd.mrlaxua.presse.ci",nocase; classtype:attempted-recon; sid:200006379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"masterducati.com",nocase; classtype:attempted-recon; sid:200006380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mastrconsultants.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mastrconsultants.web.app",nocase; classtype:attempted-recon; sid:200006382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"matamask.info",nocase; classtype:attempted-recon; sid:200006383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"match.lookatmynewphotos.com",nocase; classtype:attempted-recon; sid:200006384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"matchoklahoma.com",nocase; classtype:attempted-recon; sid:200006385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"materialui-902a9.web.app",nocase; classtype:attempted-recon; sid:200006386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"matkaom.com",nocase; classtype:attempted-recon; sid:200006387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"matketlaceaxelndinide.com",nocase; classtype:attempted-recon; sid:200006388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maxchemicals.com.np",nocase; classtype:attempted-recon; sid:200006389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maximazer-inv.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maximazer-inv.web.app",nocase; classtype:attempted-recon; sid:200006391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maxis-winner-2020.webs.com",nocase; classtype:attempted-recon; sid:200006392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maxtexportapottyrentalsaustin.com",nocase; classtype:attempted-recon; sid:200006393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maya.in.ua",nocase; classtype:attempted-recon; sid:200006394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayoristaalapublica.com",nocase; classtype:attempted-recon; sid:200006395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mayrezult.github.io",nocase; classtype:attempted-recon; sid:200006396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mbank-invest.web.app",nocase; classtype:attempted-recon; sid:200006397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mbarquitecto.cl",nocase; classtype:attempted-recon; sid:200006398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mbevarvmso.duckdns.org",nocase; classtype:attempted-recon; sid:200006399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mc-488f839d-5c25-46b8-a4ee-140400-headless-fd1.azurefd.net",nocase; classtype:attempted-recon; sid:200006400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mccarthyelectrical.com",nocase; classtype:attempted-recon; sid:200006401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mcconcep.cluster005.ovh.net",nocase; classtype:attempted-recon; sid:200006402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mchganistore.solofolio.net",nocase; classtype:attempted-recon; sid:200006403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mckennittfamily.com",nocase; classtype:attempted-recon; sid:200006404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mcmeiteyhi.duckdns.org",nocase; classtype:attempted-recon; sid:200006405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mcsr.co",nocase; classtype:attempted-recon; sid:200006406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"md-3.whb.tempwebhost.net",nocase; classtype:attempted-recon; sid:200006407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mdaelectricidad.cl",nocase; classtype:attempted-recon; sid:200006408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mddcorporpcorp.njmdcorporate.com",nocase; classtype:attempted-recon; sid:200006409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mdurucan.com",nocase; classtype:attempted-recon; sid:200006410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mdzxpodz.com",nocase; classtype:attempted-recon; sid:200006411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meacseerascorasoernd.byepacq.ne.pw",nocase; classtype:attempted-recon; sid:200006412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"medelinahealth.com",nocase; classtype:attempted-recon; sid:200006413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"medicalexamscenter.com",nocase; classtype:attempted-recon; sid:200006414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"medidata.pjnet.jp",nocase; classtype:attempted-recon; sid:200006415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"medidata.ufcontent.com",nocase; classtype:attempted-recon; sid:200006416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"medo.world",nocase; classtype:attempted-recon; sid:200006417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meeting-23900123090123.bitbucket.io",nocase; classtype:attempted-recon; sid:200006418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meine-postbank-de.com",nocase; classtype:attempted-recon; sid:200006419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mejtiqp.top",nocase; classtype:attempted-recon; sid:200006420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"membersiberostartheclub.com.mx",nocase; classtype:attempted-recon; sid:200006421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"memberweillsfargobro.000webhostapp.com",nocase; classtype:attempted-recon; sid:200006422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meme-lisbosbo.comme-a-lisbonne.com",nocase; classtype:attempted-recon; sid:200006423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"memoriamapu.cl",nocase; classtype:attempted-recon; sid:200006424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mens.vn",nocase; classtype:attempted-recon; sid:200006425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mentorusa.org",nocase; classtype:attempted-recon; sid:200006426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meolas-uno.preview-domain.com",nocase; classtype:attempted-recon; sid:200006427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mercadopago-autenticbrl.pagina-oficial.com",nocase; classtype:attempted-recon; sid:200006428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"message-webapp2242022-1311426938.cos.ap-nanjing.myqcloud.com",nocase; classtype:attempted-recon; sid:200006429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"messagerie-orange210.yolasite.com",nocase; classtype:attempted-recon; sid:200006430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"messari.cx",nocase; classtype:attempted-recon; sid:200006431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestertignseekjet4.blogspot.com",nocase; classtype:attempted-recon; sid:200006432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestertignseekjet5.blogspot.com",nocase; classtype:attempted-recon; sid:200006433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestertignseekjet6.blogspot.com",nocase; classtype:attempted-recon; sid:200006434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mestredaobra.com",nocase; classtype:attempted-recon; sid:200006435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meta-appeal-10184.herokuapp.com",nocase; classtype:attempted-recon; sid:200006436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metaciteacn.noisy-scene-1d5c.rcvrypegsfty.workers.dev",nocase; classtype:attempted-recon; sid:200006437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metadopt.minti.live",nocase; classtype:attempted-recon; sid:200006438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamakwallet.unaux.com",nocase; classtype:attempted-recon; sid:200006439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamasf.cc",nocase; classtype:attempted-recon; sid:200006440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-account-support.web.app",nocase; classtype:attempted-recon; sid:200006441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-io.biz",nocase; classtype:attempted-recon; sid:200006442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-io.quickdiate.com",nocase; classtype:attempted-recon; sid:200006443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-nft.io",nocase; classtype:attempted-recon; sid:200006444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-partenaires.com",nocase; classtype:attempted-recon; sid:200006445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-wallet-security.com",nocase; classtype:attempted-recon; sid:200006446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-wallet-verification.com",nocase; classtype:attempted-recon; sid:200006447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-wallet.ru",nocase; classtype:attempted-recon; sid:200006448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-walletio.ttttgaming.com",nocase; classtype:attempted-recon; sid:200006449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask-web.misecure.com",nocase; classtype:attempted-recon; sid:200006450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.cash",nocase; classtype:attempted-recon; sid:200006451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.cm",nocase; classtype:attempted-recon; sid:200006452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.en.download.it",nocase; classtype:attempted-recon; sid:200006453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.financial",nocase; classtype:attempted-recon; sid:200006454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.gd",nocase; classtype:attempted-recon; sid:200006455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.io-get-verification-auth.ga",nocase; classtype:attempted-recon; sid:200006456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.io-wallet-token-defl-web3-dapps-nft.io-bhm.site",nocase; classtype:attempted-recon; sid:200006457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.io.wallet-dapps.live",nocase; classtype:attempted-recon; sid:200006458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.lv",nocase; classtype:attempted-recon; sid:200006459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.nu",nocase; classtype:attempted-recon; sid:200006460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.si",nocase; classtype:attempted-recon; sid:200006461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask.study",nocase; classtype:attempted-recon; sid:200006462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask004.com",nocase; classtype:attempted-recon; sid:200006463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamask2022bonus.com",nocase; classtype:attempted-recon; sid:200006464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskcio.com",nocase; classtype:attempted-recon; sid:200006465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskdownloadandroid.xyz",nocase; classtype:attempted-recon; sid:200006466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaske.me",nocase; classtype:attempted-recon; sid:200006467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskey.com",nocase; classtype:attempted-recon; sid:200006468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskhelp.io",nocase; classtype:attempted-recon; sid:200006469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaski-io.com",nocase; classtype:attempted-recon; sid:200006470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskios.com",nocase; classtype:attempted-recon; sid:200006471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskreset.com",nocase; classtype:attempted-recon; sid:200006472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamasks-validate.com",nocase; classtype:attempted-recon; sid:200006473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamasks.vip",nocase; classtype:attempted-recon; sid:200006474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskwalle.top",nocase; classtype:attempted-recon; sid:200006475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamaskwallet.easy.co",nocase; classtype:attempted-recon; sid:200006476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamesk.world",nocase; classtype:attempted-recon; sid:200006477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamosk-io.com",nocase; classtype:attempted-recon; sid:200006478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metamsk.world",nocase; classtype:attempted-recon; sid:200006479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metarnesk.com",nocase; classtype:attempted-recon; sid:200006480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metaverifizaiona.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metaverifizaiona.web.app",nocase; classtype:attempted-recon; sid:200006482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metropolisclouds.com",nocase; classtype:attempted-recon; sid:200006483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"metttamamsksklogi.azurewebsites.net",nocase; classtype:attempted-recon; sid:200006484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meufgts.app.br",nocase; classtype:attempted-recon; sid:200006485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meuinfinity.com.br",nocase; classtype:attempted-recon; sid:200006486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"meusabor.com.br",nocase; classtype:attempted-recon; sid:200006487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mewscc09.pages.dev",nocase; classtype:attempted-recon; sid:200006488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mexpup.com",nocase; classtype:attempted-recon; sid:200006489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mfacebook.blogspot.com.cy",nocase; classtype:attempted-recon; sid:200006490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mfacebook.blogspot.lt",nocase; classtype:attempted-recon; sid:200006491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mfacebook.blogspot.rs",nocase; classtype:attempted-recon; sid:200006492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mfpr2-wqaaa-aaaad-qcvbq-cai.ic0.app",nocase; classtype:attempted-recon; sid:200006493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mgfccsecretariat.org",nocase; classtype:attempted-recon; sid:200006494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mgmpublicschoolrjn.in",nocase; classtype:attempted-recon; sid:200006495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mgthgf.sbpxhac.cn",nocase; classtype:attempted-recon; sid:200006496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mhuddleston.ultramedicinadiagnostica.com.br",nocase; classtype:attempted-recon; sid:200006497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mi.jetblue.com",nocase; classtype:attempted-recon; sid:200006498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miamihairdoctor.com",nocase; classtype:attempted-recon; sid:200006499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mibancocrece.com.co",nocase; classtype:attempted-recon; sid:200006500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mic-cinautheticate.pages.dev",nocase; classtype:attempted-recon; sid:200006501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micanaldigital-personas.shop",nocase; classtype:attempted-recon; sid:200006502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micccrd-sadsadkljsdakl.lyccav.cn",nocase; classtype:attempted-recon; sid:200006503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mickaelbesse.com",nocase; classtype:attempted-recon; sid:200006504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-dbtc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-dbtc.web.app",nocase; classtype:attempted-recon; sid:200006506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-detc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-detc.web.app",nocase; classtype:attempted-recon; sid:200006508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-mctc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-mctc.web.app",nocase; classtype:attempted-recon; sid:200006510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-shtc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-file-share-folder-shtc.web.app",nocase; classtype:attempted-recon; sid:200006512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-identification.com",nocase; classtype:attempted-recon; sid:200006513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-login-file-share-drive.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-login-file-share-drive.web.app",nocase; classtype:attempted-recon; sid:200006515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-share-file-login-drive-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro-share-file-login-drive-folder.web.app",nocase; classtype:attempted-recon; sid:200006517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro50495045045.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micro50495045045.web.app",nocase; classtype:attempted-recon; sid:200006519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microadobe.myportfolio.com",nocase; classtype:attempted-recon; sid:200006520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microcav.square.site",nocase; classtype:attempted-recon; sid:200006521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsftbtconnect2filesecureinboxqthomegindropboxbackboxpdf-log.weebly.com",nocase; classtype:attempted-recon; sid:200006522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft-001.weebly.com",nocase; classtype:attempted-recon; sid:200006523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft-azuresecurelogin.myportfolio.com",nocase; classtype:attempted-recon; sid:200006524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft-outlook365.myportfolio.com",nocase; classtype:attempted-recon; sid:200006525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoft2210.yolasite.com",nocase; classtype:attempted-recon; sid:200006526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsofterro.xyz",nocase; classtype:attempted-recon; sid:200006527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftoffice365credentials.myportfolio.com",nocase; classtype:attempted-recon; sid:200006528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftofficesecure.myportfolio.com",nocase; classtype:attempted-recon; sid:200006529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftonlinedocumentsharepoint.weebly.com",nocase; classtype:attempted-recon; sid:200006530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftonlineonedrive.myportfolio.com",nocase; classtype:attempted-recon; sid:200006531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftsharepointportal.myportfolio.com",nocase; classtype:attempted-recon; sid:200006532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"microsoftwebserver.mfs.gg",nocase; classtype:attempted-recon; sid:200006533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"micuenta01.github.io",nocase; classtype:attempted-recon; sid:200006534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"midwesthomesinc.com",nocase; classtype:attempted-recon; sid:200006535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miicarrid.co.jp.dhssu.top",nocase; classtype:attempted-recon; sid:200006536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"milanobet301.com",nocase; classtype:attempted-recon; sid:200006537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"milwaukee8.com",nocase; classtype:attempted-recon; sid:200006538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"minargamerbd.com",nocase; classtype:attempted-recon; sid:200006539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"minerlee.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200006540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mingming20160152.github.io",nocase; classtype:attempted-recon; sid:200006541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mirrorfamily-ak.ru",nocase; classtype:attempted-recon; sid:200006542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miss-paym02.com",nocase; classtype:attempted-recon; sid:200006543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"missionshashank.org",nocase; classtype:attempted-recon; sid:200006544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mistabadseed.com",nocase; classtype:attempted-recon; sid:200006545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mistoeras--co-jp.top",nocase; classtype:attempted-recon; sid:200006546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"misty-band-9f1c.driveloadve.workers.dev",nocase; classtype:attempted-recon; sid:200006547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"misty-base-2a16.dappy0542-mails-files1101.workers.dev",nocase; classtype:attempted-recon; sid:200006548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"misty-tree-0684.on.fleek.co",nocase; classtype:attempted-recon; sid:200006549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mittalconstructions.co.in",nocase; classtype:attempted-recon; sid:200006550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mityurl.com",nocase; classtype:attempted-recon; sid:200006551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjayme9jdg9izxixmjeydgg.filesusr.com",nocase; classtype:attempted-recon; sid:200006552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjayme9jdg9izxiymjnyza.filesusr.com",nocase; classtype:attempted-recon; sid:200006553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1heta1dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200006554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetezmtj0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200006555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetgym3jk.filesusr.com",nocase; classtype:attempted-recon; sid:200006556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetizmtl0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200006557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetqymhro.filesusr.com",nocase; classtype:attempted-recon; sid:200006558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetu3dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200006559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu1hetuymhro.filesusr.com",nocase; classtype:attempted-recon; sid:200006560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu5vdmvtymvymji5dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200006561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymu5vdmvtymvymtexdgg.filesusr.com",nocase; classtype:attempted-recon; sid:200006562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymuf1z3vzdde4mtf0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200006563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymufwcmlsmde5dgg.filesusr.com",nocase; classtype:attempted-recon; sid:200006564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bhk0mtf0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200006565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bhk1mtr0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200006566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bhkzmtn0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200006567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bmu0mtf0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200006568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymup1bmuymzfzda.filesusr.com",nocase; classtype:attempted-recon; sid:200006569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymuphbnvhcnkxmzv0aa.filesusr.com",nocase; classtype:attempted-recon; sid:200006570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymurly2vtymvymjiyn3ro.filesusr.com",nocase; classtype:attempted-recon; sid:200006571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjaymvnlchrlbwjlcjizmxn0.filesusr.com",nocase; classtype:attempted-recon; sid:200006572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mjowsnkxqs.duckdns.org",nocase; classtype:attempted-recon; sid:200006573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mko.cal-leasing.com",nocase; classtype:attempted-recon; sid:200006574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkwcn-au-pay.geboskqgfn.cn",nocase; classtype:attempted-recon; sid:200006575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkwcn-au-pay.jbcrm.cn",nocase; classtype:attempted-recon; sid:200006576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mkwcn-au-pay.qiscrm.cn",nocase; classtype:attempted-recon; sid:200006577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mlenergiasolar.com.br",nocase; classtype:attempted-recon; sid:200006578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmm2g-ayaaa-aaaad-qcvaa-cai.ic.fleek.co",nocase; classtype:attempted-recon; sid:200006579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mn-finamce.com",nocase; classtype:attempted-recon; sid:200006580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mnbj550.top",nocase; classtype:attempted-recon; sid:200006581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mo.cu.edu.eg",nocase; classtype:attempted-recon; sid:200006582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobasheir.psf-store.net",nocase; classtype:attempted-recon; sid:200006583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobiadvanced.net",nocase; classtype:attempted-recon; sid:200006584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobieglnewiger.chongmingcs.com",nocase; classtype:attempted-recon; sid:200006585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobile.meta-pages.workers.dev",nocase; classtype:attempted-recon; sid:200006586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobileogsdgwru.quayp.com",nocase; classtype:attempted-recon; sid:200006587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobilesuica.jp-co-oi.top",nocase; classtype:attempted-recon; sid:200006588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mobilesuica.jp-co-oy.top",nocase; classtype:attempted-recon; sid:200006589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mocat.net.au",nocase; classtype:attempted-recon; sid:200006590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moduloaplicativo.azurewebsites.net",nocase; classtype:attempted-recon; sid:200006591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mojapaczka-aliegro.orderboole.shop",nocase; classtype:attempted-recon; sid:200006592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mojapaczka-aliegro.ordertiye.shop",nocase; classtype:attempted-recon; sid:200006593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mojapaczka-lnpost.orderzuzuka.shop",nocase; classtype:attempted-recon; sid:200006594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moje-olx.sprawa30845.beauty",nocase; classtype:attempted-recon; sid:200006595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mon-token.com",nocase; classtype:attempted-recon; sid:200006596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monama.co.za",nocase; classtype:attempted-recon; sid:200006597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mondayblesings.weebly.com",nocase; classtype:attempted-recon; sid:200006598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monespaca.blogspot.com",nocase; classtype:attempted-recon; sid:200006599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moneytoprealpokies-online-c.com",nocase; classtype:attempted-recon; sid:200006600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monikacables.com",nocase; classtype:attempted-recon; sid:200006601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monirshouvo.github.io",nocase; classtype:attempted-recon; sid:200006602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monyeward.com",nocase; classtype:attempted-recon; sid:200006603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monzo.block-cancel-card.com",nocase; classtype:attempted-recon; sid:200006604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monzo.card-block.com",nocase; classtype:attempted-recon; sid:200006605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"monzo.login-cancel.net",nocase; classtype:attempted-recon; sid:200006606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moonfusionrestaurant.it",nocase; classtype:attempted-recon; sid:200006607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moradoros2.temp.swtest.ru",nocase; classtype:attempted-recon; sid:200006608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"morning-glitter-2e87.filedownjs.workers.dev",nocase; classtype:attempted-recon; sid:200006609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mortimersprinklers.com",nocase; classtype:attempted-recon; sid:200006610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mosca.pt",nocase; classtype:attempted-recon; sid:200006611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"moveislojinha-app.blogspot.com",nocase; classtype:attempted-recon; sid:200006612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mowcn-au-pay.awoca.cn",nocase; classtype:attempted-recon; sid:200006613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mowcn-au-pay.bfscrm.cn",nocase; classtype:attempted-recon; sid:200006614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mowcn-au-pay.diqiuri.cn",nocase; classtype:attempted-recon; sid:200006615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mowcn-au-pay.jfscrm.cn",nocase; classtype:attempted-recon; sid:200006616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mowcn-au-pay.mclkj.cn",nocase; classtype:attempted-recon; sid:200006617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mowcn-au-pay.sqzsf.cn",nocase; classtype:attempted-recon; sid:200006618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mowcn-au-pay.twscrm.cn",nocase; classtype:attempted-recon; sid:200006619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mowcn-au-pay.wpyyc.cn",nocase; classtype:attempted-recon; sid:200006620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mozgrowing.com",nocase; classtype:attempted-recon; sid:200006621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mp-acessremoves2022.pagina-oficial.com",nocase; classtype:attempted-recon; sid:200006622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mpbirdcontrol.qc.ca",nocase; classtype:attempted-recon; sid:200006623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mporetatau.x10.mx",nocase; classtype:attempted-recon; sid:200006624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mportalcertifica5093.dreamhosters.com",nocase; classtype:attempted-recon; sid:200006625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mps-areaclient.com",nocase; classtype:attempted-recon; sid:200006626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mpsienaprotezionefrodi.com",nocase; classtype:attempted-recon; sid:200006627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mpsienaserviziostorno.com",nocase; classtype:attempted-recon; sid:200006628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mrslove.org",nocase; classtype:attempted-recon; sid:200006629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"msc-doelsach.at",nocase; classtype:attempted-recon; sid:200006630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.020jeans.com.cn",nocase; classtype:attempted-recon; sid:200006631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.0571ol.com.cn",nocase; classtype:attempted-recon; sid:200006632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.07jmpe0s.com.cn",nocase; classtype:attempted-recon; sid:200006633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.1gpmre27.com.cn",nocase; classtype:attempted-recon; sid:200006634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.48irel3a.com.cn",nocase; classtype:attempted-recon; sid:200006635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.4hnm1gsc.com.cn",nocase; classtype:attempted-recon; sid:200006636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.52flash.com.cn",nocase; classtype:attempted-recon; sid:200006637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.52maodzw.com.cn",nocase; classtype:attempted-recon; sid:200006638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.59dtjai0.com.cn",nocase; classtype:attempted-recon; sid:200006639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.5d7n8ca.com.cn",nocase; classtype:attempted-recon; sid:200006640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.5fj8w6dw.com.cn",nocase; classtype:attempted-recon; sid:200006641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.668trip.com.cn",nocase; classtype:attempted-recon; sid:200006642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.70rbpel8.com.cn",nocase; classtype:attempted-recon; sid:200006643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.8gdwi7g8.com.cn",nocase; classtype:attempted-recon; sid:200006644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.91boche.com.cn",nocase; classtype:attempted-recon; sid:200006645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.9daai63a.com.cn",nocase; classtype:attempted-recon; sid:200006646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.aahrsk.com.cn",nocase; classtype:attempted-recon; sid:200006647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.abraxas.com.cn",nocase; classtype:attempted-recon; sid:200006648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.ahkusa.com.cn",nocase; classtype:attempted-recon; sid:200006649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.ai8cswyc.com.cn",nocase; classtype:attempted-recon; sid:200006650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.ainijun.com.cn",nocase; classtype:attempted-recon; sid:200006651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.amoe690p.com.cn",nocase; classtype:attempted-recon; sid:200006652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.anmg56.com.cn",nocase; classtype:attempted-recon; sid:200006653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.anzypb.com.cn",nocase; classtype:attempted-recon; sid:200006654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.apcezig.com.cn",nocase; classtype:attempted-recon; sid:200006655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.aqh27.com.cn",nocase; classtype:attempted-recon; sid:200006656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.bbbjdq.com.cn",nocase; classtype:attempted-recon; sid:200006657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.bengchen.com.cn",nocase; classtype:attempted-recon; sid:200006658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.bengkai.com.cn",nocase; classtype:attempted-recon; sid:200006659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.bfxk1107.com.cn",nocase; classtype:attempted-recon; sid:200006660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.cengkuo.com.cn",nocase; classtype:attempted-recon; sid:200006661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.cengpiao.com.cn",nocase; classtype:attempted-recon; sid:200006662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.cengzhe.com.cn",nocase; classtype:attempted-recon; sid:200006663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.cengzheng.com.cn",nocase; classtype:attempted-recon; sid:200006664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.cenhuan.com.cn",nocase; classtype:attempted-recon; sid:200006665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.chakua.com.cn",nocase; classtype:attempted-recon; sid:200006666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.chunou.com.cn",nocase; classtype:attempted-recon; sid:200006667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.citygold.com.cn",nocase; classtype:attempted-recon; sid:200006668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.damameiyi.com.cn",nocase; classtype:attempted-recon; sid:200006669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.dcyj365.com.cn",nocase; classtype:attempted-recon; sid:200006670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.designyourconcrete.com.cn",nocase; classtype:attempted-recon; sid:200006671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.deweng.com.cn",nocase; classtype:attempted-recon; sid:200006672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.djblcbay.com.cn",nocase; classtype:attempted-recon; sid:200006673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.dongkao.com.cn",nocase; classtype:attempted-recon; sid:200006674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.double-e.com.cn",nocase; classtype:attempted-recon; sid:200006675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.duixuan.com.cn",nocase; classtype:attempted-recon; sid:200006676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.dunhei.com.cn",nocase; classtype:attempted-recon; sid:200006677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.duozhua.com.cn",nocase; classtype:attempted-recon; sid:200006678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.dylwkj.com.cn",nocase; classtype:attempted-recon; sid:200006679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.epw7b8gn.com.cn",nocase; classtype:attempted-recon; sid:200006680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.ewmamomf.com.cn",nocase; classtype:attempted-recon; sid:200006681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.ez0ydrzw.com.cn",nocase; classtype:attempted-recon; sid:200006682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.feikuan.com.cn",nocase; classtype:attempted-recon; sid:200006683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.flintcg.com.cn",nocase; classtype:attempted-recon; sid:200006684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.foucang.com.cn",nocase; classtype:attempted-recon; sid:200006685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.fsibiu.com.cn",nocase; classtype:attempted-recon; sid:200006686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.g064wyb3.com.cn",nocase; classtype:attempted-recon; sid:200006687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.gainiao.com.cn",nocase; classtype:attempted-recon; sid:200006688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.greenseal.com.cn",nocase; classtype:attempted-recon; sid:200006689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.gtzrgd.com.cn",nocase; classtype:attempted-recon; sid:200006690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.guisao.com.cn",nocase; classtype:attempted-recon; sid:200006691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.gwkjyk.com.cn",nocase; classtype:attempted-recon; sid:200006692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.h980fg34.com.cn",nocase; classtype:attempted-recon; sid:200006693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.hbccmy.com.cn",nocase; classtype:attempted-recon; sid:200006694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.hencang.com.cn",nocase; classtype:attempted-recon; sid:200006695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.her-story.com.cn",nocase; classtype:attempted-recon; sid:200006696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.huaiduan.com.cn",nocase; classtype:attempted-recon; sid:200006697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.huanan-wm.com.cn",nocase; classtype:attempted-recon; sid:200006698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.huangcui.com.cn",nocase; classtype:attempted-recon; sid:200006699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.hubpen.com.cn",nocase; classtype:attempted-recon; sid:200006700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.hznami.com.cn",nocase; classtype:attempted-recon; sid:200006701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.iak8co0w.com.cn",nocase; classtype:attempted-recon; sid:200006702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.jiangzhua.com.cn",nocase; classtype:attempted-recon; sid:200006703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.jielue.com.cn",nocase; classtype:attempted-recon; sid:200006704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.jinuoer.com.cn",nocase; classtype:attempted-recon; sid:200006705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.jionglv.com.cn",nocase; classtype:attempted-recon; sid:200006706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.jiuchui.com.cn",nocase; classtype:attempted-recon; sid:200006707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.juncui.com.cn",nocase; classtype:attempted-recon; sid:200006708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.juyuangs.com.cn",nocase; classtype:attempted-recon; sid:200006709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.kahbyew.com.cn",nocase; classtype:attempted-recon; sid:200006710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.kararar.com.cn",nocase; classtype:attempted-recon; sid:200006711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.kayumanis.com.cn",nocase; classtype:attempted-recon; sid:200006712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.kepie.com.cn",nocase; classtype:attempted-recon; sid:200006713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.kfs119.com.cn",nocase; classtype:attempted-recon; sid:200006714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.km-senge.com.cn",nocase; classtype:attempted-recon; sid:200006715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.koyosha.com.cn",nocase; classtype:attempted-recon; sid:200006716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.kuiwai.com.cn",nocase; classtype:attempted-recon; sid:200006717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.l091ezsp.com.cn",nocase; classtype:attempted-recon; sid:200006718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.labie.com.cn",nocase; classtype:attempted-recon; sid:200006719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.langpang.com.cn",nocase; classtype:attempted-recon; sid:200006720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.lieding.com.cn",nocase; classtype:attempted-recon; sid:200006721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.lijun99.com.cn",nocase; classtype:attempted-recon; sid:200006722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.lkblog.com.cn",nocase; classtype:attempted-recon; sid:200006723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.longnai.com.cn",nocase; classtype:attempted-recon; sid:200006724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.lunluan.com.cn",nocase; classtype:attempted-recon; sid:200006725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.m15m7jfb.com.cn",nocase; classtype:attempted-recon; sid:200006726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.maozhui.com.cn",nocase; classtype:attempted-recon; sid:200006727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.mb9tolcw.com.cn",nocase; classtype:attempted-recon; sid:200006728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.mf-kvm.com.cn",nocase; classtype:attempted-recon; sid:200006729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.mgm741.com.cn",nocase; classtype:attempted-recon; sid:200006730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.midea-sz.com.cn",nocase; classtype:attempted-recon; sid:200006731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.miningcn.com.cn",nocase; classtype:attempted-recon; sid:200006732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.minlou.com.cn",nocase; classtype:attempted-recon; sid:200006733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.missjto.com.cn",nocase; classtype:attempted-recon; sid:200006734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.miuhua.com.cn",nocase; classtype:attempted-recon; sid:200006735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.miukai.com.cn",nocase; classtype:attempted-recon; sid:200006736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.moomail.com.cn",nocase; classtype:attempted-recon; sid:200006737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.moushu.com.cn",nocase; classtype:attempted-recon; sid:200006738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.music98.com.cn",nocase; classtype:attempted-recon; sid:200006739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.neatec.com.cn",nocase; classtype:attempted-recon; sid:200006740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.nengzhuo.com.cn",nocase; classtype:attempted-recon; sid:200006741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.nenpian.com.cn",nocase; classtype:attempted-recon; sid:200006742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.nentian.com.cn",nocase; classtype:attempted-recon; sid:200006743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.newbaron.com.cn",nocase; classtype:attempted-recon; sid:200006744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.niaohong.com.cn",nocase; classtype:attempted-recon; sid:200006745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.niushuan.com.cn",nocase; classtype:attempted-recon; sid:200006746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.offlady.com.cn",nocase; classtype:attempted-recon; sid:200006747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.p5gyazta.com.cn",nocase; classtype:attempted-recon; sid:200006748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.pl0kyjcz.com.cn",nocase; classtype:attempted-recon; sid:200006749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.rmtrxq.com.cn",nocase; classtype:attempted-recon; sid:200006750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.rochemall.com.cn",nocase; classtype:attempted-recon; sid:200006751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.ruitiao.com.cn",nocase; classtype:attempted-recon; sid:200006752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.ruzhun.com.cn",nocase; classtype:attempted-recon; sid:200006753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.s6awj4ga.com.cn",nocase; classtype:attempted-recon; sid:200006754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.s7aecrtl.com.cn",nocase; classtype:attempted-recon; sid:200006755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.saadtibk.com.cn",nocase; classtype:attempted-recon; sid:200006756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.sgmbtwri.com.cn",nocase; classtype:attempted-recon; sid:200006757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.shenzen.com.cn",nocase; classtype:attempted-recon; sid:200006758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.shruikun.com.cn",nocase; classtype:attempted-recon; sid:200006759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.shsiwei.com.cn",nocase; classtype:attempted-recon; sid:200006760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.smgjl20g.com.cn",nocase; classtype:attempted-recon; sid:200006761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.suiqiong.com.cn",nocase; classtype:attempted-recon; sid:200006762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.t8r0emhb.com.cn",nocase; classtype:attempted-recon; sid:200006763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.tb6nesmd.com.cn",nocase; classtype:attempted-recon; sid:200006764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.tguoyinbo.com.cn",nocase; classtype:attempted-recon; sid:200006765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.tj-wy.com.cn",nocase; classtype:attempted-recon; sid:200006766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.tnvtgb.com.cn",nocase; classtype:attempted-recon; sid:200006767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.toupang.com.cn",nocase; classtype:attempted-recon; sid:200006768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.toyokuni.com.cn",nocase; classtype:attempted-recon; sid:200006769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.triesshop.com.cn",nocase; classtype:attempted-recon; sid:200006770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.twlcsa95.com.cn",nocase; classtype:attempted-recon; sid:200006771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.vtugoel.com.cn",nocase; classtype:attempted-recon; sid:200006772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.wang114.com.cn",nocase; classtype:attempted-recon; sid:200006773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.webside.com.cn",nocase; classtype:attempted-recon; sid:200006774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.whhyyy.com.cn",nocase; classtype:attempted-recon; sid:200006775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.wjdieib.com.cn",nocase; classtype:attempted-recon; sid:200006776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.wxznjj.com.cn",nocase; classtype:attempted-recon; sid:200006777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.xbfjnrvy.com.cn",nocase; classtype:attempted-recon; sid:200006778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.xkdibq.com.cn",nocase; classtype:attempted-recon; sid:200006779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.xtensyon.com.cn",nocase; classtype:attempted-recon; sid:200006780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.xvpkcx.com.cn",nocase; classtype:attempted-recon; sid:200006781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.y07gfknc.com.cn",nocase; classtype:attempted-recon; sid:200006782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.yinsan.com.cn",nocase; classtype:attempted-recon; sid:200006783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.ywgaoge.com.cn",nocase; classtype:attempted-recon; sid:200006784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.ywi1nm3w.com.cn",nocase; classtype:attempted-recon; sid:200006785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.zhaizhang.com.cn",nocase; classtype:attempted-recon; sid:200006786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.zhangnian.com.cn",nocase; classtype:attempted-recon; sid:200006787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.zhaopang.com.cn",nocase; classtype:attempted-recon; sid:200006788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.zhoutun.com.cn",nocase; classtype:attempted-recon; sid:200006789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.zjszddhg.com.cn",nocase; classtype:attempted-recon; sid:200006790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.zuohuai.com.cn",nocase; classtype:attempted-recon; sid:200006791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"msofficemessagescenter-1.mfs.gg",nocase; classtype:attempted-recon; sid:200006792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtask-pr01.web.app",nocase; classtype:attempted-recon; sid:200006793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtb-247-sec00.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtb-247-sec00.web.app",nocase; classtype:attempted-recon; sid:200006795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtb3-dc622.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtb3xx.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtb3xx.web.app",nocase; classtype:attempted-recon; sid:200006798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbaccess.ddns.net",nocase; classtype:attempted-recon; sid:200006799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbact.avpaa.com",nocase; classtype:attempted-recon; sid:200006800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbank-alert.servebeer.com",nocase; classtype:attempted-recon; sid:200006801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbk-alert.serveirc.com",nocase; classtype:attempted-recon; sid:200006802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbkk.ddns.net",nocase; classtype:attempted-recon; sid:200006803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbonlinee.com",nocase; classtype:attempted-recon; sid:200006804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtbverifysecured.z13.web.core.windows.net",nocase; classtype:attempted-recon; sid:200006805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtib0.info",nocase; classtype:attempted-recon; sid:200006806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtonline-login.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtron.in",nocase; classtype:attempted-recon; sid:200006808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mtrsteel.com",nocase; classtype:attempted-recon; sid:200006809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mturkiyegovtr-aidat-basvuru-hizli-guvenli.com",nocase; classtype:attempted-recon; sid:200006810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mub.me",nocase; classtype:attempted-recon; sid:200006811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mudd.marpuasanotice.workers.dev",nocase; classtype:attempted-recon; sid:200006812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"muddy-ayya.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200006813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"muddy-dawn-b613.sharepoinx.workers.dev",nocase; classtype:attempted-recon; sid:200006814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"muddy-river-7975.on.fleek.co",nocase; classtype:attempted-recon; sid:200006815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mueslisvvap.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mueslisvvap.web.app",nocase; classtype:attempted-recon; sid:200006817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mujg.lyhiiyb.cn",nocase; classtype:attempted-recon; sid:200006818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"multibankweb.com",nocase; classtype:attempted-recon; sid:200006819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"multichainconnect.com",nocase; classtype:attempted-recon; sid:200006820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"multilingual.on.fleek.co",nocase; classtype:attempted-recon; sid:200006821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"muniporoy.gob.pe",nocase; classtype:attempted-recon; sid:200006822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"murlidharrope.com",nocase; classtype:attempted-recon; sid:200006823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"musclegainsnow.com",nocase; classtype:attempted-recon; sid:200006824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mvcas.com",nocase; classtype:attempted-recon; sid:200006825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mvellolandingpage.azurewebsites.net",nocase; classtype:attempted-recon; sid:200006826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mxrr.com",nocase; classtype:attempted-recon; sid:200006827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mxtb3x.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mxxgmx2022.yolasite.com",nocase; classtype:attempted-recon; sid:200006829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-arnazno-prime6-singin6.workers.dev",nocase; classtype:attempted-recon; sid:200006830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-bithumb.web.app",nocase; classtype:attempted-recon; sid:200006831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-gmail.ir",nocase; classtype:attempted-recon; sid:200006832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my-site-silahkan-konfirmas-akun-anda088.weeblysite.com",nocase; classtype:attempted-recon; sid:200006833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.heyform.net",nocase; classtype:attempted-recon; sid:200006834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myamazon.live",nocase; classtype:attempted-recon; sid:200006835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myappbtsecurebusiness.github.io",nocase; classtype:attempted-recon; sid:200006836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myappsvalidations.com",nocase; classtype:attempted-recon; sid:200006837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mybt-authteamsw-108793.square.site",nocase; classtype:attempted-recon; sid:200006838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myclouds-21a61.web.app",nocase; classtype:attempted-recon; sid:200006839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mycommonwealthbank.com",nocase; classtype:attempted-recon; sid:200006840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mydooog.com",nocase; classtype:attempted-recon; sid:200006841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myetherwallet-app.com",nocase; classtype:attempted-recon; sid:200006842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myiccu.firebaseapp.com",nocase; classtype:attempted-recon; sid:200006843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myiccu.web.app",nocase; classtype:attempted-recon; sid:200006844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myidxxxxxhelp-support-center2020.gq",nocase; classtype:attempted-recon; sid:200006845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.0wmh288g.com.cn",nocase; classtype:attempted-recon; sid:200006846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.17wwsf.com.cn",nocase; classtype:attempted-recon; sid:200006847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.1cwrkomf.com.cn",nocase; classtype:attempted-recon; sid:200006848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.618zwt7l.com.cn",nocase; classtype:attempted-recon; sid:200006849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.687feyac.com.cn",nocase; classtype:attempted-recon; sid:200006850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.6tb80w1j.com.cn",nocase; classtype:attempted-recon; sid:200006851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.89pkhbr2.com.cn",nocase; classtype:attempted-recon; sid:200006852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.aa2cpc7.com.cn",nocase; classtype:attempted-recon; sid:200006853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.bp9ryipa.com.cn",nocase; classtype:attempted-recon; sid:200006854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.bqeejd.com.cn",nocase; classtype:attempted-recon; sid:200006855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.cannmedia.com.cn",nocase; classtype:attempted-recon; sid:200006856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.cechuan.com.cn",nocase; classtype:attempted-recon; sid:200006857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.cengting.com.cn",nocase; classtype:attempted-recon; sid:200006858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.cnlmm9w7.com.cn",nocase; classtype:attempted-recon; sid:200006859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.congdui.com.cn",nocase; classtype:attempted-recon; sid:200006860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.coulun.com.cn",nocase; classtype:attempted-recon; sid:200006861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.cr1ny4km.com.cn",nocase; classtype:attempted-recon; sid:200006862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.cspabik1.com.cn",nocase; classtype:attempted-recon; sid:200006863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.dh-hm.com.cn",nocase; classtype:attempted-recon; sid:200006864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.diandianbei.com.cn",nocase; classtype:attempted-recon; sid:200006865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.dinisi.com.cn",nocase; classtype:attempted-recon; sid:200006866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.e-sunde.com.cn",nocase; classtype:attempted-recon; sid:200006867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.f1emc51l.com.cn",nocase; classtype:attempted-recon; sid:200006868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.fkihti.com.cn",nocase; classtype:attempted-recon; sid:200006869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.fouying.com.cn",nocase; classtype:attempted-recon; sid:200006870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.hansor6.com.cn",nocase; classtype:attempted-recon; sid:200006871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.haotupian.com.cn",nocase; classtype:attempted-recon; sid:200006872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.hfhybh.com.cn",nocase; classtype:attempted-recon; sid:200006873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.jiongbing.com.cn",nocase; classtype:attempted-recon; sid:200006874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.jthuuuu.com.cn",nocase; classtype:attempted-recon; sid:200006875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.kbzfpje.com.cn",nocase; classtype:attempted-recon; sid:200006876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.liuyan068.com.cn",nocase; classtype:attempted-recon; sid:200006877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.lunsuo.com.cn",nocase; classtype:attempted-recon; sid:200006878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.meiyaofz.com.cn",nocase; classtype:attempted-recon; sid:200006879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.miangong.com.cn",nocase; classtype:attempted-recon; sid:200006880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.motomods.com.cn",nocase; classtype:attempted-recon; sid:200006881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.ojiwsle5.com.cn",nocase; classtype:attempted-recon; sid:200006882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.olr87do.com.cn",nocase; classtype:attempted-recon; sid:200006883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.pengdiu.com.cn",nocase; classtype:attempted-recon; sid:200006884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.pzblog.com.cn",nocase; classtype:attempted-recon; sid:200006885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.shuashao.com.cn",nocase; classtype:attempted-recon; sid:200006886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.sz-yitong.com.cn",nocase; classtype:attempted-recon; sid:200006887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.townsky.com.cn",nocase; classtype:attempted-recon; sid:200006888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.yahoo3721.com.cn",nocase; classtype:attempted-recon; sid:200006889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.yc8r6njw.com.cn",nocase; classtype:attempted-recon; sid:200006890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.yuandui.com.cn",nocase; classtype:attempted-recon; sid:200006891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.yueduan.com.cn",nocase; classtype:attempted-recon; sid:200006892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.zhankeng.com.cn",nocase; classtype:attempted-recon; sid:200006893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaaseseosb.saoccoseosnb.zxy120.com.cn",nocase; classtype:attempted-recon; sid:200006894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.1hkwatas.com.cn",nocase; classtype:attempted-recon; sid:200006895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.5918wz.com.cn",nocase; classtype:attempted-recon; sid:200006896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.8e0ptyb6.com.cn",nocase; classtype:attempted-recon; sid:200006897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.ag-88.com.cn",nocase; classtype:attempted-recon; sid:200006898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.aomenhua.com.cn",nocase; classtype:attempted-recon; sid:200006899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.c5bnappc.com.cn",nocase; classtype:attempted-recon; sid:200006900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.cansuan.com.cn",nocase; classtype:attempted-recon; sid:200006901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.cjq168.com.cn",nocase; classtype:attempted-recon; sid:200006902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.cz-dk.com.cn",nocase; classtype:attempted-recon; sid:200006903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.etmaster.com.cn",nocase; classtype:attempted-recon; sid:200006904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.f1mdeaia.com.cn",nocase; classtype:attempted-recon; sid:200006905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.f6wperp1.com.cn",nocase; classtype:attempted-recon; sid:200006906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.fengkehui.com.cn",nocase; classtype:attempted-recon; sid:200006907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.founty.com.cn",nocase; classtype:attempted-recon; sid:200006908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.gapang.com.cn",nocase; classtype:attempted-recon; sid:200006909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.greenlady.com.cn",nocase; classtype:attempted-recon; sid:200006910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.gsuyta.com.cn",nocase; classtype:attempted-recon; sid:200006911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.guaichao.com.cn",nocase; classtype:attempted-recon; sid:200006912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.gzmidea.com.cn",nocase; classtype:attempted-recon; sid:200006913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.hangchong.com.cn",nocase; classtype:attempted-recon; sid:200006914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.htmzcb84.com.cn",nocase; classtype:attempted-recon; sid:200006915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.huaisuo.com.cn",nocase; classtype:attempted-recon; sid:200006916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.huanbu.com.cn",nocase; classtype:attempted-recon; sid:200006917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.huzhun.com.cn",nocase; classtype:attempted-recon; sid:200006918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.kairao.com.cn",nocase; classtype:attempted-recon; sid:200006919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.kthxty.com.cn",nocase; classtype:attempted-recon; sid:200006920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.laijiong.com.cn",nocase; classtype:attempted-recon; sid:200006921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.luqiong.com.cn",nocase; classtype:attempted-recon; sid:200006922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.lvdfpl3.com.cn",nocase; classtype:attempted-recon; sid:200006923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.mtspyx.com.cn",nocase; classtype:attempted-recon; sid:200006924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.mtyttjc.com.cn",nocase; classtype:attempted-recon; sid:200006925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.nangsai.com.cn",nocase; classtype:attempted-recon; sid:200006926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.nenshuai.com.cn",nocase; classtype:attempted-recon; sid:200006927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.noelgifts.com.cn",nocase; classtype:attempted-recon; sid:200006928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.nwew4zbf.com.cn",nocase; classtype:attempted-recon; sid:200006929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.pclearner.com.cn",nocase; classtype:attempted-recon; sid:200006930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.scwz168.com.cn",nocase; classtype:attempted-recon; sid:200006931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.sfepay.com.cn",nocase; classtype:attempted-recon; sid:200006932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.sholay.com.cn",nocase; classtype:attempted-recon; sid:200006933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.sikafu.com.cn",nocase; classtype:attempted-recon; sid:200006934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.tgnkuv.com.cn",nocase; classtype:attempted-recon; sid:200006935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.tradevip.com.cn",nocase; classtype:attempted-recon; sid:200006936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.xiuzun.com.cn",nocase; classtype:attempted-recon; sid:200006937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.yo0t1fm.com.cn",nocase; classtype:attempted-recon; sid:200006938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.chenmanqi.top",nocase; classtype:attempted-recon; sid:200006939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.rwmcr.top",nocase; classtype:attempted-recon; sid:200006940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.uvlhwb.top",nocase; classtype:attempted-recon; sid:200006941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.wiguyc.top",nocase; classtype:attempted-recon; sid:200006942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.wkbakq.top",nocase; classtype:attempted-recon; sid:200006943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.wmysah.top",nocase; classtype:attempted-recon; sid:200006944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.wotygl.top",nocase; classtype:attempted-recon; sid:200006945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.wozavw.top",nocase; classtype:attempted-recon; sid:200006946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.xfertf.top",nocase; classtype:attempted-recon; sid:200006947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.xloclk.top",nocase; classtype:attempted-recon; sid:200006948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.xovtfx.top",nocase; classtype:attempted-recon; sid:200006949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.xubnkg.top",nocase; classtype:attempted-recon; sid:200006950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.xvljph.top",nocase; classtype:attempted-recon; sid:200006951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.xvotal.top",nocase; classtype:attempted-recon; sid:200006952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.xwitwq.top",nocase; classtype:attempted-recon; sid:200006953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.ybmkwa.top",nocase; classtype:attempted-recon; sid:200006954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.ydpssl.top",nocase; classtype:attempted-recon; sid:200006955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.yfnvfr.top",nocase; classtype:attempted-recon; sid:200006956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.yfsjiq.top",nocase; classtype:attempted-recon; sid:200006957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.yqggww.top",nocase; classtype:attempted-recon; sid:200006958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.ytbspo.top",nocase; classtype:attempted-recon; sid:200006959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.yvpnxy.top",nocase; classtype:attempted-recon; sid:200006960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.yyyuwr.top",nocase; classtype:attempted-recon; sid:200006961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.yyzded.top",nocase; classtype:attempted-recon; sid:200006962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.zohlkk.top",nocase; classtype:attempted-recon; sid:200006963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.zpirok.top",nocase; classtype:attempted-recon; sid:200006964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.zrzckw.top",nocase; classtype:attempted-recon; sid:200006965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.zusrue.top",nocase; classtype:attempted-recon; sid:200006966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.rcapss.top",nocase; classtype:attempted-recon; sid:200006967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.rezkdk.top",nocase; classtype:attempted-recon; sid:200006968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.rlyndd.top",nocase; classtype:attempted-recon; sid:200006969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.rtpmvr.top",nocase; classtype:attempted-recon; sid:200006970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.rusnrh.top",nocase; classtype:attempted-recon; sid:200006971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.rxiarn.top",nocase; classtype:attempted-recon; sid:200006972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.scrqdb.top",nocase; classtype:attempted-recon; sid:200006973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.tkozlg.top",nocase; classtype:attempted-recon; sid:200006974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.tlljjk.top",nocase; classtype:attempted-recon; sid:200006975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.trxpth.top",nocase; classtype:attempted-recon; sid:200006976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.tsqcxg.top",nocase; classtype:attempted-recon; sid:200006977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.twjzsc.top",nocase; classtype:attempted-recon; sid:200006978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.uasxxj.top",nocase; classtype:attempted-recon; sid:200006979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.upjhye.top",nocase; classtype:attempted-recon; sid:200006980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaesscsosceob.aasaeasneoscb.vtnmhb.top",nocase; classtype:attempted-recon; sid:200006981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaessosceob.aasnsaeoscb.rezkdk.top",nocase; classtype:attempted-recon; sid:200006982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaessosceob.aasnsaeoscb.rusnrh.top",nocase; classtype:attempted-recon; sid:200006983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaessosceob.aasnsaeoscb.scrqdb.top",nocase; classtype:attempted-recon; sid:200006984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaessosceob.aasnsaeoscb.sgsgyb.top",nocase; classtype:attempted-recon; sid:200006985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaessosceob.aasnsaeoscb.swdfkn.top",nocase; classtype:attempted-recon; sid:200006986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaessosceob.aasnsaeoscb.tciheh.top",nocase; classtype:attempted-recon; sid:200006987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaessosceob.aasnsaeoscb.twjzsc.top",nocase; classtype:attempted-recon; sid:200006988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaessosceob.aasnsaeoscb.uijamm.top",nocase; classtype:attempted-recon; sid:200006989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaessosceob.aasnsaeoscb.upjhye.top",nocase; classtype:attempted-recon; sid:200006990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaessosceob.aasnsaeoscb.uviayc.top",nocase; classtype:attempted-recon; sid:200006991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.020jeans.com.cn",nocase; classtype:attempted-recon; sid:200006992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.07jmpe0s.com.cn",nocase; classtype:attempted-recon; sid:200006993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.18wyrcyp.com.cn",nocase; classtype:attempted-recon; sid:200006994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.1gpmre27.com.cn",nocase; classtype:attempted-recon; sid:200006995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.1mzrwj4k.com.cn",nocase; classtype:attempted-recon; sid:200006996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.21vita.com.cn",nocase; classtype:attempted-recon; sid:200006997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.4hnm1gsc.com.cn",nocase; classtype:attempted-recon; sid:200006998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.52flash.com.cn",nocase; classtype:attempted-recon; sid:200006999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.52maodzw.com.cn",nocase; classtype:attempted-recon; sid:200007000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.5igold.com.cn",nocase; classtype:attempted-recon; sid:200007001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.5jknac7k.com.cn",nocase; classtype:attempted-recon; sid:200007002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.5p6me2m6.com.cn",nocase; classtype:attempted-recon; sid:200007003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.668trip.com.cn",nocase; classtype:attempted-recon; sid:200007004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.8gdwi7g8.com.cn",nocase; classtype:attempted-recon; sid:200007005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.91boche.com.cn",nocase; classtype:attempted-recon; sid:200007006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.9t80yk5l.com.cn",nocase; classtype:attempted-recon; sid:200007007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.ahkusa.com.cn",nocase; classtype:attempted-recon; sid:200007008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.ai8cswyc.com.cn",nocase; classtype:attempted-recon; sid:200007009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.almegc5p.com.cn",nocase; classtype:attempted-recon; sid:200007010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.amoe690p.com.cn",nocase; classtype:attempted-recon; sid:200007011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.ansystem.com.cn",nocase; classtype:attempted-recon; sid:200007012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.apcezig.com.cn",nocase; classtype:attempted-recon; sid:200007013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.artlong.com.cn",nocase; classtype:attempted-recon; sid:200007014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.banglia.com.cn",nocase; classtype:attempted-recon; sid:200007015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.bengkai.com.cn",nocase; classtype:attempted-recon; sid:200007016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.bjbyby.com.cn",nocase; classtype:attempted-recon; sid:200007017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.bztfylsb.com.cn",nocase; classtype:attempted-recon; sid:200007018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.c8mnem0w.com.cn",nocase; classtype:attempted-recon; sid:200007019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.cangceng.com.cn",nocase; classtype:attempted-recon; sid:200007020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.ccrvpd.com.cn",nocase; classtype:attempted-recon; sid:200007021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.cengpiao.com.cn",nocase; classtype:attempted-recon; sid:200007022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.cengzhe.com.cn",nocase; classtype:attempted-recon; sid:200007023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.cengzheng.com.cn",nocase; classtype:attempted-recon; sid:200007024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.centong.com.cn",nocase; classtype:attempted-recon; sid:200007025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.chuandou.com.cn",nocase; classtype:attempted-recon; sid:200007026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.citygold.com.cn",nocase; classtype:attempted-recon; sid:200007027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.cocopos.com.cn",nocase; classtype:attempted-recon; sid:200007028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.designyourconcrete.com.cn",nocase; classtype:attempted-recon; sid:200007029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.deweng.com.cn",nocase; classtype:attempted-recon; sid:200007030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.djblcbay.com.cn",nocase; classtype:attempted-recon; sid:200007031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.dmapjlnk.com.cn",nocase; classtype:attempted-recon; sid:200007032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.dongkao.com.cn",nocase; classtype:attempted-recon; sid:200007033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.duixuan.com.cn",nocase; classtype:attempted-recon; sid:200007034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.duiyao.com.cn",nocase; classtype:attempted-recon; sid:200007035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.duozhua.com.cn",nocase; classtype:attempted-recon; sid:200007036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.eb7v1l.com.cn",nocase; classtype:attempted-recon; sid:200007037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.ectmj7b.com.cn",nocase; classtype:attempted-recon; sid:200007038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.epw7b8gn.com.cn",nocase; classtype:attempted-recon; sid:200007039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.ewmamomf.com.cn",nocase; classtype:attempted-recon; sid:200007040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.fangpen.com.cn",nocase; classtype:attempted-recon; sid:200007041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.feikuan.com.cn",nocase; classtype:attempted-recon; sid:200007042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.flintcg.com.cn",nocase; classtype:attempted-recon; sid:200007043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.foucang.com.cn",nocase; classtype:attempted-recon; sid:200007044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.fouguo.com.cn",nocase; classtype:attempted-recon; sid:200007045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.fouteng.com.cn",nocase; classtype:attempted-recon; sid:200007046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.fsibiu.com.cn",nocase; classtype:attempted-recon; sid:200007047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.fwjl0cr.com.cn",nocase; classtype:attempted-recon; sid:200007048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.g064wyb3.com.cn",nocase; classtype:attempted-recon; sid:200007049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.gaofugolf.com.cn",nocase; classtype:attempted-recon; sid:200007050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.guangtun.com.cn",nocase; classtype:attempted-recon; sid:200007051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.gwkjyk.com.cn",nocase; classtype:attempted-recon; sid:200007052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.hbccmy.com.cn",nocase; classtype:attempted-recon; sid:200007053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.hencang.com.cn",nocase; classtype:attempted-recon; sid:200007054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.hensuo.com.cn",nocase; classtype:attempted-recon; sid:200007055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.huaiduan.com.cn",nocase; classtype:attempted-recon; sid:200007056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.huaiga.com.cn",nocase; classtype:attempted-recon; sid:200007057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.huanan-wm.com.cn",nocase; classtype:attempted-recon; sid:200007058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.huangcui.com.cn",nocase; classtype:attempted-recon; sid:200007059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.huangqu.com.cn",nocase; classtype:attempted-recon; sid:200007060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.hubpen.com.cn",nocase; classtype:attempted-recon; sid:200007061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.hznami.com.cn",nocase; classtype:attempted-recon; sid:200007062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.i-law.com.cn",nocase; classtype:attempted-recon; sid:200007063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.iak8co0w.com.cn",nocase; classtype:attempted-recon; sid:200007064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.jdvmaa.com.cn",nocase; classtype:attempted-recon; sid:200007065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.jirk0sh.com.cn",nocase; classtype:attempted-recon; sid:200007066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.jiuchui.com.cn",nocase; classtype:attempted-recon; sid:200007067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.jmwrlfp7.com.cn",nocase; classtype:attempted-recon; sid:200007068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.juyuangs.com.cn",nocase; classtype:attempted-recon; sid:200007069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.kahbyew.com.cn",nocase; classtype:attempted-recon; sid:200007070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.kangzu.com.cn",nocase; classtype:attempted-recon; sid:200007071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.kararar.com.cn",nocase; classtype:attempted-recon; sid:200007072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.kayumanis.com.cn",nocase; classtype:attempted-recon; sid:200007073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.km-senge.com.cn",nocase; classtype:attempted-recon; sid:200007074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.konggan.com.cn",nocase; classtype:attempted-recon; sid:200007075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.kongpiao.com.cn",nocase; classtype:attempted-recon; sid:200007076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.kongze.com.cn",nocase; classtype:attempted-recon; sid:200007077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.krfocm97.com.cn",nocase; classtype:attempted-recon; sid:200007078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.ktl4a1yd.com.cn",nocase; classtype:attempted-recon; sid:200007079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.l091ezsp.com.cn",nocase; classtype:attempted-recon; sid:200007080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.labie.com.cn",nocase; classtype:attempted-recon; sid:200007081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.langpang.com.cn",nocase; classtype:attempted-recon; sid:200007082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.lhanivo.com.cn",nocase; classtype:attempted-recon; sid:200007083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.lieding.com.cn",nocase; classtype:attempted-recon; sid:200007084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.lijun99.com.cn",nocase; classtype:attempted-recon; sid:200007085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.litoyes.com.cn",nocase; classtype:attempted-recon; sid:200007086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.liujue.com.cn",nocase; classtype:attempted-recon; sid:200007087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.longlia.com.cn",nocase; classtype:attempted-recon; sid:200007088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.longnai.com.cn",nocase; classtype:attempted-recon; sid:200007089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.m15m7jfb.com.cn",nocase; classtype:attempted-recon; sid:200007090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.mb9tolcw.com.cn",nocase; classtype:attempted-recon; sid:200007091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.mengstar.com.cn",nocase; classtype:attempted-recon; sid:200007092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.mf-kvm.com.cn",nocase; classtype:attempted-recon; sid:200007093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.mgm741.com.cn",nocase; classtype:attempted-recon; sid:200007094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.miningcn.com.cn",nocase; classtype:attempted-recon; sid:200007095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.missjto.com.cn",nocase; classtype:attempted-recon; sid:200007096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.miuhua.com.cn",nocase; classtype:attempted-recon; sid:200007097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.mouxsgi.com.cn",nocase; classtype:attempted-recon; sid:200007098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.n97wf6m.com.cn",nocase; classtype:attempted-recon; sid:200007099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.neatec.com.cn",nocase; classtype:attempted-recon; sid:200007100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.nengzhuo.com.cn",nocase; classtype:attempted-recon; sid:200007101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.nenmiu.com.cn",nocase; classtype:attempted-recon; sid:200007102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.nenpian.com.cn",nocase; classtype:attempted-recon; sid:200007103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.nentian.com.cn",nocase; classtype:attempted-recon; sid:200007104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.nenxuan.com.cn",nocase; classtype:attempted-recon; sid:200007105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.niaohong.com.cn",nocase; classtype:attempted-recon; sid:200007106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.niaoken.com.cn",nocase; classtype:attempted-recon; sid:200007107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.niushuan.com.cn",nocase; classtype:attempted-recon; sid:200007108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.p8b9ge4a.com.cn",nocase; classtype:attempted-recon; sid:200007109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.phdisy21.com.cn",nocase; classtype:attempted-recon; sid:200007110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.power-x.com.cn",nocase; classtype:attempted-recon; sid:200007111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.qddongye.com.cn",nocase; classtype:attempted-recon; sid:200007112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.qiachang.com.cn",nocase; classtype:attempted-recon; sid:200007113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.rmtrxq.com.cn",nocase; classtype:attempted-recon; sid:200007114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.ruitiao.com.cn",nocase; classtype:attempted-recon; sid:200007115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.ruodiangc.com.cn",nocase; classtype:attempted-recon; sid:200007116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.s04amnw.com.cn",nocase; classtype:attempted-recon; sid:200007117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.s7aecrtl.com.cn",nocase; classtype:attempted-recon; sid:200007118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.sharang.com.cn",nocase; classtype:attempted-recon; sid:200007119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.sjzfyhs.com.cn",nocase; classtype:attempted-recon; sid:200007120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.smgjl20g.com.cn",nocase; classtype:attempted-recon; sid:200007121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.suiqiong.com.cn",nocase; classtype:attempted-recon; sid:200007122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.syslynk.com.cn",nocase; classtype:attempted-recon; sid:200007123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.tguoyinbo.com.cn",nocase; classtype:attempted-recon; sid:200007124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.tj-wy.com.cn",nocase; classtype:attempted-recon; sid:200007125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.tnvtgb.com.cn",nocase; classtype:attempted-recon; sid:200007126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.toulun.com.cn",nocase; classtype:attempted-recon; sid:200007127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.triesshop.com.cn",nocase; classtype:attempted-recon; sid:200007128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.viptoy.com.cn",nocase; classtype:attempted-recon; sid:200007129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.vtugoel.com.cn",nocase; classtype:attempted-recon; sid:200007130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.webside.com.cn",nocase; classtype:attempted-recon; sid:200007131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.whhyyy.com.cn",nocase; classtype:attempted-recon; sid:200007132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.wrjhcge.com.cn",nocase; classtype:attempted-recon; sid:200007133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.wxznjj.com.cn",nocase; classtype:attempted-recon; sid:200007134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.xbfjnrvy.com.cn",nocase; classtype:attempted-recon; sid:200007135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.xinfenya.com.cn",nocase; classtype:attempted-recon; sid:200007136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.xtensyon.com.cn",nocase; classtype:attempted-recon; sid:200007137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.y07gfknc.com.cn",nocase; classtype:attempted-recon; sid:200007138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.yangsuo.com.cn",nocase; classtype:attempted-recon; sid:200007139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.yinsan.com.cn",nocase; classtype:attempted-recon; sid:200007140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.yuken-sh.com.cn",nocase; classtype:attempted-recon; sid:200007141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.ywi1nm3w.com.cn",nocase; classtype:attempted-recon; sid:200007142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.z0oc4jm8.com.cn",nocase; classtype:attempted-recon; sid:200007143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.zaixiong.com.cn",nocase; classtype:attempted-recon; sid:200007144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.zhaizhang.com.cn",nocase; classtype:attempted-recon; sid:200007145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.zhangnian.com.cn",nocase; classtype:attempted-recon; sid:200007146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.zhangtun.com.cn",nocase; classtype:attempted-recon; sid:200007147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.zhouluobu.com.cn",nocase; classtype:attempted-recon; sid:200007148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.0571pf.com.cn",nocase; classtype:attempted-recon; sid:200007149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.12530a.com.cn",nocase; classtype:attempted-recon; sid:200007150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.1510lpw.com.cn",nocase; classtype:attempted-recon; sid:200007151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.1jiajia.com.cn",nocase; classtype:attempted-recon; sid:200007152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.1pmc6awo.com.cn",nocase; classtype:attempted-recon; sid:200007153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.2009mp3.com.cn",nocase; classtype:attempted-recon; sid:200007154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.24pl5id2.com.cn",nocase; classtype:attempted-recon; sid:200007155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.258448.com.cn",nocase; classtype:attempted-recon; sid:200007156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.41sj8oo5.com.cn",nocase; classtype:attempted-recon; sid:200007157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.4yhmeni1.com.cn",nocase; classtype:attempted-recon; sid:200007158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.5ltzg4l.com.cn",nocase; classtype:attempted-recon; sid:200007159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.5me8jao.com.cn",nocase; classtype:attempted-recon; sid:200007160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.62omc5cj.com.cn",nocase; classtype:attempted-recon; sid:200007161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.68cajhh2.com.cn",nocase; classtype:attempted-recon; sid:200007162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.6ei2p4y1.com.cn",nocase; classtype:attempted-recon; sid:200007163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.6gcwtdy2.com.cn",nocase; classtype:attempted-recon; sid:200007164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.771125.com.cn",nocase; classtype:attempted-recon; sid:200007165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.7arped5f.com.cn",nocase; classtype:attempted-recon; sid:200007166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.7lmg8cf2.com.cn",nocase; classtype:attempted-recon; sid:200007167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.7nydmjms.com.cn",nocase; classtype:attempted-recon; sid:200007168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.87crjh0i.com.cn",nocase; classtype:attempted-recon; sid:200007169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.999365.com.cn",nocase; classtype:attempted-recon; sid:200007170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.9pa4c7kf.com.cn",nocase; classtype:attempted-recon; sid:200007171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.adopen.com.cn",nocase; classtype:attempted-recon; sid:200007172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.aibihua.com.cn",nocase; classtype:attempted-recon; sid:200007173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ajecm40.com.cn",nocase; classtype:attempted-recon; sid:200007174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.americar.com.cn",nocase; classtype:attempted-recon; sid:200007175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.anmg04.com.cn",nocase; classtype:attempted-recon; sid:200007176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.anmg61.com.cn",nocase; classtype:attempted-recon; sid:200007177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.anmg74.com.cn",nocase; classtype:attempted-recon; sid:200007178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.anmg95.com.cn",nocase; classtype:attempted-recon; sid:200007179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.awy52gc.com.cn",nocase; classtype:attempted-recon; sid:200007180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.b4krcmd.com.cn",nocase; classtype:attempted-recon; sid:200007181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.beatle.com.cn",nocase; classtype:attempted-recon; sid:200007182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.bianbeng.com.cn",nocase; classtype:attempted-recon; sid:200007183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.biotope.com.cn",nocase; classtype:attempted-recon; sid:200007184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.bluelaser.com.cn",nocase; classtype:attempted-recon; sid:200007185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.c6a7km15.com.cn",nocase; classtype:attempted-recon; sid:200007186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.cankuan.com.cn",nocase; classtype:attempted-recon; sid:200007187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.caochui.com.cn",nocase; classtype:attempted-recon; sid:200007188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.catbjsc.com.cn",nocase; classtype:attempted-recon; sid:200007189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.cenben.com.cn",nocase; classtype:attempted-recon; sid:200007190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.cengcong.com.cn",nocase; classtype:attempted-recon; sid:200007191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ch1twwgm.com.cn",nocase; classtype:attempted-recon; sid:200007192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.chaikuai.com.cn",nocase; classtype:attempted-recon; sid:200007193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.chanken.com.cn",nocase; classtype:attempted-recon; sid:200007194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.chaoah.com.cn",nocase; classtype:attempted-recon; sid:200007195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.chuoyong.com.cn",nocase; classtype:attempted-recon; sid:200007196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.commtown.com.cn",nocase; classtype:attempted-recon; sid:200007197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.cosmoveda.com.cn",nocase; classtype:attempted-recon; sid:200007198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.cpvuenr.com.cn",nocase; classtype:attempted-recon; sid:200007199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.cro6w8wf.com.cn",nocase; classtype:attempted-recon; sid:200007200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.cxqingxi.com.cn",nocase; classtype:attempted-recon; sid:200007201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.cyok9b9k.com.cn",nocase; classtype:attempted-recon; sid:200007202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.cz9s5fe.com.cn",nocase; classtype:attempted-recon; sid:200007203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.danfudun.com.cn",nocase; classtype:attempted-recon; sid:200007204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.dnmkwf1o.com.cn",nocase; classtype:attempted-recon; sid:200007205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.dzcfpx.com.cn",nocase; classtype:attempted-recon; sid:200007206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.e0z5m6w.com.cn",nocase; classtype:attempted-recon; sid:200007207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ehbyz34.com.cn",nocase; classtype:attempted-recon; sid:200007208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.elourwb.com.cn",nocase; classtype:attempted-recon; sid:200007209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.exlrtf.com.cn",nocase; classtype:attempted-recon; sid:200007210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.fanzuan.com.cn",nocase; classtype:attempted-recon; sid:200007211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.fchzjdlo.com.cn",nocase; classtype:attempted-recon; sid:200007212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ffffound.com.cn",nocase; classtype:attempted-recon; sid:200007213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.flyrov.com.cn",nocase; classtype:attempted-recon; sid:200007214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ftg2k9i0.com.cn",nocase; classtype:attempted-recon; sid:200007215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.g2ahwmfl.com.cn",nocase; classtype:attempted-recon; sid:200007216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ganhuang.com.cn",nocase; classtype:attempted-recon; sid:200007217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ge7r4k6k.com.cn",nocase; classtype:attempted-recon; sid:200007218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.gjijjdo.com.cn",nocase; classtype:attempted-recon; sid:200007219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.goshico.com.cn",nocase; classtype:attempted-recon; sid:200007220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.guoxuwang.com.cn",nocase; classtype:attempted-recon; sid:200007221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.gzhuilong.com.cn",nocase; classtype:attempted-recon; sid:200007222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.haivli.com.cn",nocase; classtype:attempted-recon; sid:200007223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.hanguoxxw.com.cn",nocase; classtype:attempted-recon; sid:200007224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.hbixwjd.com.cn",nocase; classtype:attempted-recon; sid:200007225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.hjpgggg.com.cn",nocase; classtype:attempted-recon; sid:200007226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.hmzoye.com.cn",nocase; classtype:attempted-recon; sid:200007227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.hncysq.com.cn",nocase; classtype:attempted-recon; sid:200007228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.huaihun.com.cn",nocase; classtype:attempted-recon; sid:200007229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.huanzhuan.com.cn",nocase; classtype:attempted-recon; sid:200007230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.hwblfwzy.com.cn",nocase; classtype:attempted-recon; sid:200007231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ifj2n1zk.com.cn",nocase; classtype:attempted-recon; sid:200007232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ig9sez43.com.cn",nocase; classtype:attempted-recon; sid:200007233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.in-me.com.cn",nocase; classtype:attempted-recon; sid:200007234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.jiongmen.com.cn",nocase; classtype:attempted-recon; sid:200007235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.jiongzhui.com.cn",nocase; classtype:attempted-recon; sid:200007236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.jiqingba.com.cn",nocase; classtype:attempted-recon; sid:200007237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.jldele168.com.cn",nocase; classtype:attempted-recon; sid:200007238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.juancui.com.cn",nocase; classtype:attempted-recon; sid:200007239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.juejiong.com.cn",nocase; classtype:attempted-recon; sid:200007240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.jwdbxg.com.cn",nocase; classtype:attempted-recon; sid:200007241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.kaoruo.com.cn",nocase; classtype:attempted-recon; sid:200007242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.king-cos.com.cn",nocase; classtype:attempted-recon; sid:200007243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.kinoptik.com.cn",nocase; classtype:attempted-recon; sid:200007244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.knwwzd8w.com.cn",nocase; classtype:attempted-recon; sid:200007245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.koreaego.com.cn",nocase; classtype:attempted-recon; sid:200007246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ks3000.com.cn",nocase; classtype:attempted-recon; sid:200007247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.kzntsjpw.com.cn",nocase; classtype:attempted-recon; sid:200007248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.land-sky.com.cn",nocase; classtype:attempted-recon; sid:200007249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.lcjuyi.com.cn",nocase; classtype:attempted-recon; sid:200007250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.led-drive.com.cn",nocase; classtype:attempted-recon; sid:200007251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.leishuan.com.cn",nocase; classtype:attempted-recon; sid:200007252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.lifelle.com.cn",nocase; classtype:attempted-recon; sid:200007253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.liupen.com.cn",nocase; classtype:attempted-recon; sid:200007254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ljnnfx.com.cn",nocase; classtype:attempted-recon; sid:200007255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.lkklpfp.com.cn",nocase; classtype:attempted-recon; sid:200007256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.longrang.com.cn",nocase; classtype:attempted-recon; sid:200007257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.luanzhi.com.cn",nocase; classtype:attempted-recon; sid:200007258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.lygclean.com.cn",nocase; classtype:attempted-recon; sid:200007259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.lyrlzy.com.cn",nocase; classtype:attempted-recon; sid:200007260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.mcgwkyyk.com.cn",nocase; classtype:attempted-recon; sid:200007261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.memberly.com.cn",nocase; classtype:attempted-recon; sid:200007262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.mintiao.com.cn",nocase; classtype:attempted-recon; sid:200007263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.mouruo.com.cn",nocase; classtype:attempted-recon; sid:200007264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ms6p7zd1.com.cn",nocase; classtype:attempted-recon; sid:200007265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.mycarz.com.cn",nocase; classtype:attempted-recon; sid:200007266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.myglgw.com.cn",nocase; classtype:attempted-recon; sid:200007267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.n45piai5.com.cn",nocase; classtype:attempted-recon; sid:200007268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.n4a1ab3k.com.cn",nocase; classtype:attempted-recon; sid:200007269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.naishan.com.cn",nocase; classtype:attempted-recon; sid:200007270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.nankingtr.com.cn",nocase; classtype:attempted-recon; sid:200007271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.nasjwj.com.cn",nocase; classtype:attempted-recon; sid:200007272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ncvkfm.com.cn",nocase; classtype:attempted-recon; sid:200007273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.nenfou.com.cn",nocase; classtype:attempted-recon; sid:200007274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.nenghun.com.cn",nocase; classtype:attempted-recon; sid:200007275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.nengluan.com.cn",nocase; classtype:attempted-recon; sid:200007276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.nenshao.com.cn",nocase; classtype:attempted-recon; sid:200007277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.niaodiao.com.cn",nocase; classtype:attempted-recon; sid:200007278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.niaoshuai.com.cn",nocase; classtype:attempted-recon; sid:200007279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.niaoza.com.cn",nocase; classtype:attempted-recon; sid:200007280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.nljprmjk.com.cn",nocase; classtype:attempted-recon; sid:200007281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.noikia.com.cn",nocase; classtype:attempted-recon; sid:200007282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.nongceng.com.cn",nocase; classtype:attempted-recon; sid:200007283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.o2ospace.com.cn",nocase; classtype:attempted-recon; sid:200007284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.onetrip.com.cn",nocase; classtype:attempted-recon; sid:200007285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.os6i05e4.com.cn",nocase; classtype:attempted-recon; sid:200007286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.p104ac0c.com.cn",nocase; classtype:attempted-recon; sid:200007287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.pocketmac.com.cn",nocase; classtype:attempted-recon; sid:200007288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.pzai72m5.com.cn",nocase; classtype:attempted-recon; sid:200007289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.qicheye.com.cn",nocase; classtype:attempted-recon; sid:200007290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.qinghetea.com.cn",nocase; classtype:attempted-recon; sid:200007291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.qiongran.com.cn",nocase; classtype:attempted-recon; sid:200007292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.rcec62ya.com.cn",nocase; classtype:attempted-recon; sid:200007293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ruanlue.com.cn",nocase; classtype:attempted-recon; sid:200007294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.rxjh4f.com.cn",nocase; classtype:attempted-recon; sid:200007295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.s85zlc2.com.cn",nocase; classtype:attempted-recon; sid:200007296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.satour.com.cn",nocase; classtype:attempted-recon; sid:200007297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.sechuang.com.cn",nocase; classtype:attempted-recon; sid:200007298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.shuailiao.com.cn",nocase; classtype:attempted-recon; sid:200007299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.skyhunter.com.cn",nocase; classtype:attempted-recon; sid:200007300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.sl-motor.com.cn",nocase; classtype:attempted-recon; sid:200007301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.snowtiger.com.cn",nocase; classtype:attempted-recon; sid:200007302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.soutie.com.cn",nocase; classtype:attempted-recon; sid:200007303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.t1egk637.com.cn",nocase; classtype:attempted-recon; sid:200007304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.t9jw5b0f.com.cn",nocase; classtype:attempted-recon; sid:200007305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.tglmer.com.cn",nocase; classtype:attempted-recon; sid:200007306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.tha9s0kc.com.cn",nocase; classtype:attempted-recon; sid:200007307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.tiffki.com.cn",nocase; classtype:attempted-recon; sid:200007308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.trip4u.com.cn",nocase; classtype:attempted-recon; sid:200007309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.tugjqs.com.cn",nocase; classtype:attempted-recon; sid:200007310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.tuopiji.com.cn",nocase; classtype:attempted-recon; sid:200007311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.tushu010.com.cn",nocase; classtype:attempted-recon; sid:200007312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.tydfblog.com.cn",nocase; classtype:attempted-recon; sid:200007313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.tzom4nab.com.cn",nocase; classtype:attempted-recon; sid:200007314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.uxmbaiy.com.cn",nocase; classtype:attempted-recon; sid:200007315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.v8muscle.com.cn",nocase; classtype:attempted-recon; sid:200007316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.vpzllll.com.cn",nocase; classtype:attempted-recon; sid:200007317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.vswaokn.com.cn",nocase; classtype:attempted-recon; sid:200007318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.vxtvufu.com.cn",nocase; classtype:attempted-recon; sid:200007319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.vyiqjfc.com.cn",nocase; classtype:attempted-recon; sid:200007320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.wdtjwo86.com.cn",nocase; classtype:attempted-recon; sid:200007321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.wengniao.com.cn",nocase; classtype:attempted-recon; sid:200007322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.wmfoankc.com.cn",nocase; classtype:attempted-recon; sid:200007323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.woboshi.com.cn",nocase; classtype:attempted-recon; sid:200007324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.woodfire.com.cn",nocase; classtype:attempted-recon; sid:200007325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.wtp017fn.com.cn",nocase; classtype:attempted-recon; sid:200007326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.wuxiaozhu.com.cn",nocase; classtype:attempted-recon; sid:200007327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.xyekod.com.cn",nocase; classtype:attempted-recon; sid:200007328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.yhzjw7.com.cn",nocase; classtype:attempted-recon; sid:200007329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.yishuboli.com.cn",nocase; classtype:attempted-recon; sid:200007330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.ylfapiao.com.cn",nocase; classtype:attempted-recon; sid:200007331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.zgqclbjw.com.cn",nocase; classtype:attempted-recon; sid:200007332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.zhaizhe.com.cn",nocase; classtype:attempted-recon; sid:200007333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.zhe5yr2g.com.cn",nocase; classtype:attempted-recon; sid:200007334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.zhengshao.com.cn",nocase; classtype:attempted-recon; sid:200007335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.zhounen.com.cn",nocase; classtype:attempted-recon; sid:200007336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.zonlc8yo.com.cn",nocase; classtype:attempted-recon; sid:200007337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.zoudang.com.cn",nocase; classtype:attempted-recon; sid:200007338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.rezkdk.top",nocase; classtype:attempted-recon; sid:200007339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.rhxhhg.top",nocase; classtype:attempted-recon; sid:200007340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.roiysf.top",nocase; classtype:attempted-recon; sid:200007341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.rtpmvr.top",nocase; classtype:attempted-recon; sid:200007342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.rusnrh.top",nocase; classtype:attempted-recon; sid:200007343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.sscssr.top",nocase; classtype:attempted-recon; sid:200007344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.swdfkn.top",nocase; classtype:attempted-recon; sid:200007345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.tciheh.top",nocase; classtype:attempted-recon; sid:200007346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.tcpgpg.top",nocase; classtype:attempted-recon; sid:200007347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.tglthh.top",nocase; classtype:attempted-recon; sid:200007348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.tkozlg.top",nocase; classtype:attempted-recon; sid:200007349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.tlljjk.top",nocase; classtype:attempted-recon; sid:200007350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.tsqcxg.top",nocase; classtype:attempted-recon; sid:200007351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.txwlxg.top",nocase; classtype:attempted-recon; sid:200007352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.txxbks.top",nocase; classtype:attempted-recon; sid:200007353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.tzmndc.top",nocase; classtype:attempted-recon; sid:200007354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.uhojoz.top",nocase; classtype:attempted-recon; sid:200007355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.uisvoo.top",nocase; classtype:attempted-recon; sid:200007356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.uviayc.top",nocase; classtype:attempted-recon; sid:200007357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.uxhejc.top",nocase; classtype:attempted-recon; sid:200007358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.uzegyc.top",nocase; classtype:attempted-recon; sid:200007359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.vaylqb.top",nocase; classtype:attempted-recon; sid:200007360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.wdzxnt.top",nocase; classtype:attempted-recon; sid:200007361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsosceob.aaeasneoscb.whsjcd.top",nocase; classtype:attempted-recon; sid:200007362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.0wmh288g.com.cn",nocase; classtype:attempted-recon; sid:200007363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.17wwsf.com.cn",nocase; classtype:attempted-recon; sid:200007364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.1cwrkomf.com.cn",nocase; classtype:attempted-recon; sid:200007365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.277500.com.cn",nocase; classtype:attempted-recon; sid:200007366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.4oylm13.com.cn",nocase; classtype:attempted-recon; sid:200007367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.987sip7.com.cn",nocase; classtype:attempted-recon; sid:200007368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.9orehdww.com.cn",nocase; classtype:attempted-recon; sid:200007369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.a598sc0k.com.cn",nocase; classtype:attempted-recon; sid:200007370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.aa2cpc7.com.cn",nocase; classtype:attempted-recon; sid:200007371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.anmg94.com.cn",nocase; classtype:attempted-recon; sid:200007372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.bgjkcn.com.cn",nocase; classtype:attempted-recon; sid:200007373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.bp9ryipa.com.cn",nocase; classtype:attempted-recon; sid:200007374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.cannmedia.com.cn",nocase; classtype:attempted-recon; sid:200007375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.cengting.com.cn",nocase; classtype:attempted-recon; sid:200007376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.cnlmm9w7.com.cn",nocase; classtype:attempted-recon; sid:200007377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.coulun.com.cn",nocase; classtype:attempted-recon; sid:200007378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.cr1ny4km.com.cn",nocase; classtype:attempted-recon; sid:200007379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.cspabik1.com.cn",nocase; classtype:attempted-recon; sid:200007380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.dh-hm.com.cn",nocase; classtype:attempted-recon; sid:200007381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.dinisi.com.cn",nocase; classtype:attempted-recon; sid:200007382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.dp9r15i8.com.cn",nocase; classtype:attempted-recon; sid:200007383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.e-sunde.com.cn",nocase; classtype:attempted-recon; sid:200007384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.enzuan.com.cn",nocase; classtype:attempted-recon; sid:200007385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.f1emc51l.com.cn",nocase; classtype:attempted-recon; sid:200007386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.facesmile.com.cn",nocase; classtype:attempted-recon; sid:200007387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.fkihti.com.cn",nocase; classtype:attempted-recon; sid:200007388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.fouying.com.cn",nocase; classtype:attempted-recon; sid:200007389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.gongzha.com.cn",nocase; classtype:attempted-recon; sid:200007390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.hansor6.com.cn",nocase; classtype:attempted-recon; sid:200007391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.haotupian.com.cn",nocase; classtype:attempted-recon; sid:200007392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.hfhybh.com.cn",nocase; classtype:attempted-recon; sid:200007393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.jionglai.com.cn",nocase; classtype:attempted-recon; sid:200007394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.jiongruan.com.cn",nocase; classtype:attempted-recon; sid:200007395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.jiongtuo.com.cn",nocase; classtype:attempted-recon; sid:200007396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.jthuuuu.com.cn",nocase; classtype:attempted-recon; sid:200007397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.kbzfpje.com.cn",nocase; classtype:attempted-recon; sid:200007398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.kljwater.com.cn",nocase; classtype:attempted-recon; sid:200007399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.lhz9r6pc.com.cn",nocase; classtype:attempted-recon; sid:200007400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.liuyan068.com.cn",nocase; classtype:attempted-recon; sid:200007401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.mangjiong.com.cn",nocase; classtype:attempted-recon; sid:200007402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.meiyaofz.com.cn",nocase; classtype:attempted-recon; sid:200007403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.ontune.com.cn",nocase; classtype:attempted-recon; sid:200007404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.pengdiu.com.cn",nocase; classtype:attempted-recon; sid:200007405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.qiangdie.com.cn",nocase; classtype:attempted-recon; sid:200007406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.sdicif.com.cn",nocase; classtype:attempted-recon; sid:200007407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.shaw0m6h.com.cn",nocase; classtype:attempted-recon; sid:200007408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.shuashao.com.cn",nocase; classtype:attempted-recon; sid:200007409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.shuazhui.com.cn",nocase; classtype:attempted-recon; sid:200007410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.sz-yitong.com.cn",nocase; classtype:attempted-recon; sid:200007411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.temazu.com.cn",nocase; classtype:attempted-recon; sid:200007412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.tm-701.com.cn",nocase; classtype:attempted-recon; sid:200007413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.whktedcd.com.cn",nocase; classtype:attempted-recon; sid:200007414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.wz5eyhc1.com.cn",nocase; classtype:attempted-recon; sid:200007415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.xrzhvd.com.cn",nocase; classtype:attempted-recon; sid:200007416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.yahoo3721.com.cn",nocase; classtype:attempted-recon; sid:200007417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.yuandui.com.cn",nocase; classtype:attempted-recon; sid:200007418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.zhankeng.com.cn",nocase; classtype:attempted-recon; sid:200007419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.06cmncai.com.cn",nocase; classtype:attempted-recon; sid:200007420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.0a16yw7m.com.cn",nocase; classtype:attempted-recon; sid:200007421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.101hao.com.cn",nocase; classtype:attempted-recon; sid:200007422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.1hkwatas.com.cn",nocase; classtype:attempted-recon; sid:200007423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.5918wz.com.cn",nocase; classtype:attempted-recon; sid:200007424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.5am8jdej.com.cn",nocase; classtype:attempted-recon; sid:200007425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.6tdm5m06.com.cn",nocase; classtype:attempted-recon; sid:200007426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.99diannao.com.cn",nocase; classtype:attempted-recon; sid:200007427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.ag-88.com.cn",nocase; classtype:attempted-recon; sid:200007428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.ai-talk.com.cn",nocase; classtype:attempted-recon; sid:200007429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.cansuan.com.cn",nocase; classtype:attempted-recon; sid:200007430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.cengzhuo.com.cn",nocase; classtype:attempted-recon; sid:200007431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.cz-dk.com.cn",nocase; classtype:attempted-recon; sid:200007432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.dalianmei.com.cn",nocase; classtype:attempted-recon; sid:200007433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.doh48bnj.com.cn",nocase; classtype:attempted-recon; sid:200007434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.f1mdeaia.com.cn",nocase; classtype:attempted-recon; sid:200007435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.fczytv.com.cn",nocase; classtype:attempted-recon; sid:200007436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.fengkehui.com.cn",nocase; classtype:attempted-recon; sid:200007437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.founty.com.cn",nocase; classtype:attempted-recon; sid:200007438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.fw6yg0a.com.cn",nocase; classtype:attempted-recon; sid:200007439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.gapang.com.cn",nocase; classtype:attempted-recon; sid:200007440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.gouqiya.com.cn",nocase; classtype:attempted-recon; sid:200007441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.gsuyta.com.cn",nocase; classtype:attempted-recon; sid:200007442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.gunjiang.com.cn",nocase; classtype:attempted-recon; sid:200007443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.gzmidea.com.cn",nocase; classtype:attempted-recon; sid:200007444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.h2mdrb92.com.cn",nocase; classtype:attempted-recon; sid:200007445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.haozen.com.cn",nocase; classtype:attempted-recon; sid:200007446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.huaisuo.com.cn",nocase; classtype:attempted-recon; sid:200007447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.huanbu.com.cn",nocase; classtype:attempted-recon; sid:200007448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.jiongban.com.cn",nocase; classtype:attempted-recon; sid:200007449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.kinglook.com.cn",nocase; classtype:attempted-recon; sid:200007450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.kthxty.com.cn",nocase; classtype:attempted-recon; sid:200007451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.kuaiyiya.com.cn",nocase; classtype:attempted-recon; sid:200007452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.luanzhai.com.cn",nocase; classtype:attempted-recon; sid:200007453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.luqiong.com.cn",nocase; classtype:attempted-recon; sid:200007454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.minshao.com.cn",nocase; classtype:attempted-recon; sid:200007455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.mnt8amg.com.cn",nocase; classtype:attempted-recon; sid:200007456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.nangsai.com.cn",nocase; classtype:attempted-recon; sid:200007457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.nenshuai.com.cn",nocase; classtype:attempted-recon; sid:200007458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.nwew4zbf.com.cn",nocase; classtype:attempted-recon; sid:200007459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.o792mwbf.com.cn",nocase; classtype:attempted-recon; sid:200007460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.pclearner.com.cn",nocase; classtype:attempted-recon; sid:200007461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.sar9my9m.com.cn",nocase; classtype:attempted-recon; sid:200007462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.sholay.com.cn",nocase; classtype:attempted-recon; sid:200007463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.tjxsxs.com.cn",nocase; classtype:attempted-recon; sid:200007464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.tradevip.com.cn",nocase; classtype:attempted-recon; sid:200007465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.willhong.com.cn",nocase; classtype:attempted-recon; sid:200007466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.xiuqia.com.cn",nocase; classtype:attempted-recon; sid:200007467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.yasndwjz.com.cn",nocase; classtype:attempted-recon; sid:200007468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.rezkdk.top",nocase; classtype:attempted-recon; sid:200007469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.rgiclw.top",nocase; classtype:attempted-recon; sid:200007470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.rhxhhg.top",nocase; classtype:attempted-recon; sid:200007471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.rusnrh.top",nocase; classtype:attempted-recon; sid:200007472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.sscssr.top",nocase; classtype:attempted-recon; sid:200007473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.tkozlg.top",nocase; classtype:attempted-recon; sid:200007474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.tsqcxg.top",nocase; classtype:attempted-recon; sid:200007475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.twjzsc.top",nocase; classtype:attempted-recon; sid:200007476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.txwlxg.top",nocase; classtype:attempted-recon; sid:200007477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.txxbks.top",nocase; classtype:attempted-recon; sid:200007478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.uasxxj.top",nocase; classtype:attempted-recon; sid:200007479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.uietyc.top",nocase; classtype:attempted-recon; sid:200007480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.uijamm.top",nocase; classtype:attempted-recon; sid:200007481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.uisvoo.top",nocase; classtype:attempted-recon; sid:200007482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.uviayc.top",nocase; classtype:attempted-recon; sid:200007483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.uzegyc.top",nocase; classtype:attempted-recon; sid:200007484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.vaylqb.top",nocase; classtype:attempted-recon; sid:200007485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.vxcgax.top",nocase; classtype:attempted-recon; sid:200007486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.vxrdzp.top",nocase; classtype:attempted-recon; sid:200007487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjasosceob.aasneoscb.whsjcd.top",nocase; classtype:attempted-recon; sid:200007488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjassodnscb.nasomb.12530a.com.cn",nocase; classtype:attempted-recon; sid:200007489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjassodnscb.nasomb.51cpjm.com.cn",nocase; classtype:attempted-recon; sid:200007490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjassodnscb.nasomb.anasousa.com.cn",nocase; classtype:attempted-recon; sid:200007491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjassodnscb.nasomb.commtown.com.cn",nocase; classtype:attempted-recon; sid:200007492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjassodnscb.nasomb.menboo.com.cn",nocase; classtype:attempted-recon; sid:200007493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjassodnscb.nasomb.n45piai5.com.cn",nocase; classtype:attempted-recon; sid:200007494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjassodnscb.nasomb.noikia.com.cn",nocase; classtype:attempted-recon; sid:200007495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjassodnscb.nasomb.p104ac0c.com.cn",nocase; classtype:attempted-recon; sid:200007496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjassodnscb.nasomb.s85zlc2.com.cn",nocase; classtype:attempted-recon; sid:200007497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjassodnscb.nasomb.tayd5cw1.com.cn",nocase; classtype:attempted-recon; sid:200007498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.0wmh288g.com.cn",nocase; classtype:attempted-recon; sid:200007499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.277500.com.cn",nocase; classtype:attempted-recon; sid:200007500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.4oylm13.com.cn",nocase; classtype:attempted-recon; sid:200007501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.618zwt7l.com.cn",nocase; classtype:attempted-recon; sid:200007502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.687feyac.com.cn",nocase; classtype:attempted-recon; sid:200007503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.76cjmrsa.com.cn",nocase; classtype:attempted-recon; sid:200007504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.987sip7.com.cn",nocase; classtype:attempted-recon; sid:200007505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.aa2cpc7.com.cn",nocase; classtype:attempted-recon; sid:200007506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.anmg94.com.cn",nocase; classtype:attempted-recon; sid:200007507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.bgjkcn.com.cn",nocase; classtype:attempted-recon; sid:200007508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.bp9ryipa.com.cn",nocase; classtype:attempted-recon; sid:200007509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.bqeejd.com.cn",nocase; classtype:attempted-recon; sid:200007510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.cechuan.com.cn",nocase; classtype:attempted-recon; sid:200007511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.cengtong.com.cn",nocase; classtype:attempted-recon; sid:200007512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.cnlmm9w7.com.cn",nocase; classtype:attempted-recon; sid:200007513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.coulun.com.cn",nocase; classtype:attempted-recon; sid:200007514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.cr1ny4km.com.cn",nocase; classtype:attempted-recon; sid:200007515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.cspabik1.com.cn",nocase; classtype:attempted-recon; sid:200007516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.dgrunding.com.cn",nocase; classtype:attempted-recon; sid:200007517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.diandianbei.com.cn",nocase; classtype:attempted-recon; sid:200007518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.dinisi.com.cn",nocase; classtype:attempted-recon; sid:200007519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.dp9r15i8.com.cn",nocase; classtype:attempted-recon; sid:200007520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.e-sunde.com.cn",nocase; classtype:attempted-recon; sid:200007521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.enzuan.com.cn",nocase; classtype:attempted-recon; sid:200007522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.fousong.com.cn",nocase; classtype:attempted-recon; sid:200007523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.fouying.com.cn",nocase; classtype:attempted-recon; sid:200007524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.gtm-m.com.cn",nocase; classtype:attempted-recon; sid:200007525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.hansor6.com.cn",nocase; classtype:attempted-recon; sid:200007526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.haotupian.com.cn",nocase; classtype:attempted-recon; sid:200007527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.hfhybh.com.cn",nocase; classtype:attempted-recon; sid:200007528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.jiongbing.com.cn",nocase; classtype:attempted-recon; sid:200007529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.jionglai.com.cn",nocase; classtype:attempted-recon; sid:200007530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.jiongtuo.com.cn",nocase; classtype:attempted-recon; sid:200007531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.liehang.com.cn",nocase; classtype:attempted-recon; sid:200007532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.liuyan068.com.cn",nocase; classtype:attempted-recon; sid:200007533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.luanyi.com.cn",nocase; classtype:attempted-recon; sid:200007534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.lunsuo.com.cn",nocase; classtype:attempted-recon; sid:200007535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.mangjiong.com.cn",nocase; classtype:attempted-recon; sid:200007536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.meiyaofz.com.cn",nocase; classtype:attempted-recon; sid:200007537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.naofang.com.cn",nocase; classtype:attempted-recon; sid:200007538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.niaoguang.com.cn",nocase; classtype:attempted-recon; sid:200007539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.ojiwsle5.com.cn",nocase; classtype:attempted-recon; sid:200007540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.olr87do.com.cn",nocase; classtype:attempted-recon; sid:200007541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.ontune.com.cn",nocase; classtype:attempted-recon; sid:200007542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.sce7ok9y.com.cn",nocase; classtype:attempted-recon; sid:200007543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.shaw0m6h.com.cn",nocase; classtype:attempted-recon; sid:200007544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.shuazhui.com.cn",nocase; classtype:attempted-recon; sid:200007545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.sochang.com.cn",nocase; classtype:attempted-recon; sid:200007546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.sz-yitong.com.cn",nocase; classtype:attempted-recon; sid:200007547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.temazu.com.cn",nocase; classtype:attempted-recon; sid:200007548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.tm-701.com.cn",nocase; classtype:attempted-recon; sid:200007549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.townsky.com.cn",nocase; classtype:attempted-recon; sid:200007550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.wz5eyhc1.com.cn",nocase; classtype:attempted-recon; sid:200007551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.yuandui.com.cn",nocase; classtype:attempted-recon; sid:200007552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.yueduan.com.cn",nocase; classtype:attempted-recon; sid:200007553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.zhankeng.com.cn",nocase; classtype:attempted-recon; sid:200007554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.zxy120.com.cn",nocase; classtype:attempted-recon; sid:200007555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.06cmncai.com.cn",nocase; classtype:attempted-recon; sid:200007556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.0a16yw7m.com.cn",nocase; classtype:attempted-recon; sid:200007557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.1hkwatas.com.cn",nocase; classtype:attempted-recon; sid:200007558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.5918wz.com.cn",nocase; classtype:attempted-recon; sid:200007559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.5am8jdej.com.cn",nocase; classtype:attempted-recon; sid:200007560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.6ljatk58.com.cn",nocase; classtype:attempted-recon; sid:200007561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.6tdm5m06.com.cn",nocase; classtype:attempted-recon; sid:200007562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.ag-88.com.cn",nocase; classtype:attempted-recon; sid:200007563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.aomenhua.com.cn",nocase; classtype:attempted-recon; sid:200007564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.boyada.com.cn",nocase; classtype:attempted-recon; sid:200007565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.cansuan.com.cn",nocase; classtype:attempted-recon; sid:200007566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.catk27bl.com.cn",nocase; classtype:attempted-recon; sid:200007567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.cengzhuo.com.cn",nocase; classtype:attempted-recon; sid:200007568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.etmaster.com.cn",nocase; classtype:attempted-recon; sid:200007569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.f6wperp1.com.cn",nocase; classtype:attempted-recon; sid:200007570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.fczytv.com.cn",nocase; classtype:attempted-recon; sid:200007571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.gangnin.com.cn",nocase; classtype:attempted-recon; sid:200007572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.gapang.com.cn",nocase; classtype:attempted-recon; sid:200007573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.gsuyta.com.cn",nocase; classtype:attempted-recon; sid:200007574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.gunjiang.com.cn",nocase; classtype:attempted-recon; sid:200007575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.gzmidea.com.cn",nocase; classtype:attempted-recon; sid:200007576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.h2mdrb92.com.cn",nocase; classtype:attempted-recon; sid:200007577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.hangchong.com.cn",nocase; classtype:attempted-recon; sid:200007578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.htmzcb84.com.cn",nocase; classtype:attempted-recon; sid:200007579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.huaisuo.com.cn",nocase; classtype:attempted-recon; sid:200007580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.huanbu.com.cn",nocase; classtype:attempted-recon; sid:200007581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.ip2008.com.cn",nocase; classtype:attempted-recon; sid:200007582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.jiongzong.com.cn",nocase; classtype:attempted-recon; sid:200007583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.kairao.com.cn",nocase; classtype:attempted-recon; sid:200007584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.kidsshoes.com.cn",nocase; classtype:attempted-recon; sid:200007585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.kthxty.com.cn",nocase; classtype:attempted-recon; sid:200007586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.laijiong.com.cn",nocase; classtype:attempted-recon; sid:200007587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.luanzhai.com.cn",nocase; classtype:attempted-recon; sid:200007588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.luqiong.com.cn",nocase; classtype:attempted-recon; sid:200007589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.mianmou.com.cn",nocase; classtype:attempted-recon; sid:200007590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.miugun.com.cn",nocase; classtype:attempted-recon; sid:200007591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.mnt8amg.com.cn",nocase; classtype:attempted-recon; sid:200007592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.mtspyx.com.cn",nocase; classtype:attempted-recon; sid:200007593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.mtyttjc.com.cn",nocase; classtype:attempted-recon; sid:200007594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.nangsai.com.cn",nocase; classtype:attempted-recon; sid:200007595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.o792mwbf.com.cn",nocase; classtype:attempted-recon; sid:200007596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.pangpan.com.cn",nocase; classtype:attempted-recon; sid:200007597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.sar9my9m.com.cn",nocase; classtype:attempted-recon; sid:200007598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.scwz168.com.cn",nocase; classtype:attempted-recon; sid:200007599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.tjxsxs.com.cn",nocase; classtype:attempted-recon; sid:200007600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.whship.com.cn",nocase; classtype:attempted-recon; sid:200007601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.willhong.com.cn",nocase; classtype:attempted-recon; sid:200007602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.ywajpk7e.com.cn",nocase; classtype:attempted-recon; sid:200007603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcascsomoenb.sceaaosmb.0571pf.com.cn",nocase; classtype:attempted-recon; sid:200007604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcascsomoenb.sceaaosmb.7lmg8cf2.com.cn",nocase; classtype:attempted-recon; sid:200007605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcascsomoenb.sceaaosmb.dapenti.com.cn",nocase; classtype:attempted-recon; sid:200007606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcascsomoenb.sceaaosmb.dyetieba.com.cn",nocase; classtype:attempted-recon; sid:200007607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcascsomoenb.sceaaosmb.ehbyz34.com.cn",nocase; classtype:attempted-recon; sid:200007608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcascsomoenb.sceaaosmb.os6i05e4.com.cn",nocase; classtype:attempted-recon; sid:200007609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcassoodnscb.scenasomb.1kaca8n.com.cn",nocase; classtype:attempted-recon; sid:200007610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcassoodnscb.scenasomb.6gcwtdy2.com.cn",nocase; classtype:attempted-recon; sid:200007611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcassoodnscb.scenasomb.americar.com.cn",nocase; classtype:attempted-recon; sid:200007612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcassoodnscb.scenasomb.nbaaxs.com.cn",nocase; classtype:attempted-recon; sid:200007613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcassoodnscb.scenasomb.ntours.com.cn",nocase; classtype:attempted-recon; sid:200007614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcassoodnscb.scenasomb.qinghetea.com.cn",nocase; classtype:attempted-recon; sid:200007615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcassoodnscb.scenasomb.sechuang.com.cn",nocase; classtype:attempted-recon; sid:200007616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcassoodnscb.scenasomb.y9j1sctf.com.cn",nocase; classtype:attempted-recon; sid:200007617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.020jeans.com.cn",nocase; classtype:attempted-recon; sid:200007618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.0571ol.com.cn",nocase; classtype:attempted-recon; sid:200007619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.07jmpe0s.com.cn",nocase; classtype:attempted-recon; sid:200007620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.1mzrwj4k.com.cn",nocase; classtype:attempted-recon; sid:200007621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.21vita.com.cn",nocase; classtype:attempted-recon; sid:200007622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.52maodzw.com.cn",nocase; classtype:attempted-recon; sid:200007623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.59dtjai0.com.cn",nocase; classtype:attempted-recon; sid:200007624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.5d7n8ca.com.cn",nocase; classtype:attempted-recon; sid:200007625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.5fj8w6dw.com.cn",nocase; classtype:attempted-recon; sid:200007626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.5p6me2m6.com.cn",nocase; classtype:attempted-recon; sid:200007627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.70rbpel8.com.cn",nocase; classtype:attempted-recon; sid:200007628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.82cm90eo.com.cn",nocase; classtype:attempted-recon; sid:200007629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.8z65bngs.com.cn",nocase; classtype:attempted-recon; sid:200007630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.9hks0gzd.com.cn",nocase; classtype:attempted-recon; sid:200007631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.aahrsk.com.cn",nocase; classtype:attempted-recon; sid:200007632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.abraxas.com.cn",nocase; classtype:attempted-recon; sid:200007633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.ahkusa.com.cn",nocase; classtype:attempted-recon; sid:200007634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.ai8cswyc.com.cn",nocase; classtype:attempted-recon; sid:200007635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.ainijun.com.cn",nocase; classtype:attempted-recon; sid:200007636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.almegc5p.com.cn",nocase; classtype:attempted-recon; sid:200007637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.amoe690p.com.cn",nocase; classtype:attempted-recon; sid:200007638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.ansystem.com.cn",nocase; classtype:attempted-recon; sid:200007639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.artlong.com.cn",nocase; classtype:attempted-recon; sid:200007640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.banglia.com.cn",nocase; classtype:attempted-recon; sid:200007641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.bengchen.com.cn",nocase; classtype:attempted-recon; sid:200007642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.bfxk1107.com.cn",nocase; classtype:attempted-recon; sid:200007643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.bjbyby.com.cn",nocase; classtype:attempted-recon; sid:200007644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.byukumg.com.cn",nocase; classtype:attempted-recon; sid:200007645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.c5w9lsk7.com.cn",nocase; classtype:attempted-recon; sid:200007646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.c8mnem0w.com.cn",nocase; classtype:attempted-recon; sid:200007647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.caorao.com.cn",nocase; classtype:attempted-recon; sid:200007648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.ccrvpd.com.cn",nocase; classtype:attempted-recon; sid:200007649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.cengkuo.com.cn",nocase; classtype:attempted-recon; sid:200007650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.cengzhe.com.cn",nocase; classtype:attempted-recon; sid:200007651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.cengzheng.com.cn",nocase; classtype:attempted-recon; sid:200007652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.cenhuan.com.cn",nocase; classtype:attempted-recon; sid:200007653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.chunou.com.cn",nocase; classtype:attempted-recon; sid:200007654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.citygold.com.cn",nocase; classtype:attempted-recon; sid:200007655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.cshy168.com.cn",nocase; classtype:attempted-recon; sid:200007656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.d7rspbam.com.cn",nocase; classtype:attempted-recon; sid:200007657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.damameiyi.com.cn",nocase; classtype:attempted-recon; sid:200007658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.designyourconcrete.com.cn",nocase; classtype:attempted-recon; sid:200007659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.deweng.com.cn",nocase; classtype:attempted-recon; sid:200007660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.djblcbay.com.cn",nocase; classtype:attempted-recon; sid:200007661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.dmapjlnk.com.cn",nocase; classtype:attempted-recon; sid:200007662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.duixuan.com.cn",nocase; classtype:attempted-recon; sid:200007663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.duiyao.com.cn",nocase; classtype:attempted-recon; sid:200007664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.dunping.com.cn",nocase; classtype:attempted-recon; sid:200007665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.duozhua.com.cn",nocase; classtype:attempted-recon; sid:200007666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.dylwkj.com.cn",nocase; classtype:attempted-recon; sid:200007667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.ectmj7b.com.cn",nocase; classtype:attempted-recon; sid:200007668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.elj0kcaw.com.cn",nocase; classtype:attempted-recon; sid:200007669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.epw7b8gn.com.cn",nocase; classtype:attempted-recon; sid:200007670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.ez0ydrzw.com.cn",nocase; classtype:attempted-recon; sid:200007671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.fangpen.com.cn",nocase; classtype:attempted-recon; sid:200007672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.feikuan.com.cn",nocase; classtype:attempted-recon; sid:200007673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.flintcg.com.cn",nocase; classtype:attempted-recon; sid:200007674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.fohuang.com.cn",nocase; classtype:attempted-recon; sid:200007675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.foucang.com.cn",nocase; classtype:attempted-recon; sid:200007676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.fouguo.com.cn",nocase; classtype:attempted-recon; sid:200007677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.fouteng.com.cn",nocase; classtype:attempted-recon; sid:200007678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.gainiao.com.cn",nocase; classtype:attempted-recon; sid:200007679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.greenseal.com.cn",nocase; classtype:attempted-recon; sid:200007680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.gtzrgd.com.cn",nocase; classtype:attempted-recon; sid:200007681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.guizai.com.cn",nocase; classtype:attempted-recon; sid:200007682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.gwkjyk.com.cn",nocase; classtype:attempted-recon; sid:200007683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.h980fg34.com.cn",nocase; classtype:attempted-recon; sid:200007684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.hbccmy.com.cn",nocase; classtype:attempted-recon; sid:200007685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.hensuo.com.cn",nocase; classtype:attempted-recon; sid:200007686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.huaiduan.com.cn",nocase; classtype:attempted-recon; sid:200007687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.huangcui.com.cn",nocase; classtype:attempted-recon; sid:200007688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.huangqu.com.cn",nocase; classtype:attempted-recon; sid:200007689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.hznami.com.cn",nocase; classtype:attempted-recon; sid:200007690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.i-law.com.cn",nocase; classtype:attempted-recon; sid:200007691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.ifysdvf.com.cn",nocase; classtype:attempted-recon; sid:200007692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.jiangzhua.com.cn",nocase; classtype:attempted-recon; sid:200007693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.jirk0sh.com.cn",nocase; classtype:attempted-recon; sid:200007694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.jmwrlfp7.com.cn",nocase; classtype:attempted-recon; sid:200007695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.jngwkhs.com.cn",nocase; classtype:attempted-recon; sid:200007696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.jnqgjx.com.cn",nocase; classtype:attempted-recon; sid:200007697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.kahbyew.com.cn",nocase; classtype:attempted-recon; sid:200007698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.kepie.com.cn",nocase; classtype:attempted-recon; sid:200007699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.kesang.com.cn",nocase; classtype:attempted-recon; sid:200007700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.kfs119.com.cn",nocase; classtype:attempted-recon; sid:200007701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.km-senge.com.cn",nocase; classtype:attempted-recon; sid:200007702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.kongze.com.cn",nocase; classtype:attempted-recon; sid:200007703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.krfocm97.com.cn",nocase; classtype:attempted-recon; sid:200007704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.ktl4a1yd.com.cn",nocase; classtype:attempted-recon; sid:200007705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.kuiwai.com.cn",nocase; classtype:attempted-recon; sid:200007706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.langhei.com.cn",nocase; classtype:attempted-recon; sid:200007707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.lhanivo.com.cn",nocase; classtype:attempted-recon; sid:200007708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.lieding.com.cn",nocase; classtype:attempted-recon; sid:200007709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.lijun99.com.cn",nocase; classtype:attempted-recon; sid:200007710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.litoyes.com.cn",nocase; classtype:attempted-recon; sid:200007711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.liujue.com.cn",nocase; classtype:attempted-recon; sid:200007712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.lkblog.com.cn",nocase; classtype:attempted-recon; sid:200007713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.longbroad.com.cn",nocase; classtype:attempted-recon; sid:200007714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.longnai.com.cn",nocase; classtype:attempted-recon; sid:200007715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.ludrus.com.cn",nocase; classtype:attempted-recon; sid:200007716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.m15m7jfb.com.cn",nocase; classtype:attempted-recon; sid:200007717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.maozhui.com.cn",nocase; classtype:attempted-recon; sid:200007718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.mb9tolcw.com.cn",nocase; classtype:attempted-recon; sid:200007719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.mengstar.com.cn",nocase; classtype:attempted-recon; sid:200007720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.mf-kvm.com.cn",nocase; classtype:attempted-recon; sid:200007721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.midea-sz.com.cn",nocase; classtype:attempted-recon; sid:200007722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.miningcn.com.cn",nocase; classtype:attempted-recon; sid:200007723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.miuhua.com.cn",nocase; classtype:attempted-recon; sid:200007724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.miukai.com.cn",nocase; classtype:attempted-recon; sid:200007725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.mouxsgi.com.cn",nocase; classtype:attempted-recon; sid:200007726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.music98.com.cn",nocase; classtype:attempted-recon; sid:200007727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.nengzhuo.com.cn",nocase; classtype:attempted-recon; sid:200007728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.nenpian.com.cn",nocase; classtype:attempted-recon; sid:200007729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.nentian.com.cn",nocase; classtype:attempted-recon; sid:200007730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.nenxuan.com.cn",nocase; classtype:attempted-recon; sid:200007731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.niushuan.com.cn",nocase; classtype:attempted-recon; sid:200007732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.njca5dzj.com.cn",nocase; classtype:attempted-recon; sid:200007733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.nsmile.com.cn",nocase; classtype:attempted-recon; sid:200007734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.officetv.com.cn",nocase; classtype:attempted-recon; sid:200007735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.phdisy21.com.cn",nocase; classtype:attempted-recon; sid:200007736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.pujinb5.com.cn",nocase; classtype:attempted-recon; sid:200007737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.rochemall.com.cn",nocase; classtype:attempted-recon; sid:200007738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.ruodiangc.com.cn",nocase; classtype:attempted-recon; sid:200007739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.s7aecrtl.com.cn",nocase; classtype:attempted-recon; sid:200007740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.sgmbtwri.com.cn",nocase; classtype:attempted-recon; sid:200007741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.shenzen.com.cn",nocase; classtype:attempted-recon; sid:200007742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.shhdbjgs.com.cn",nocase; classtype:attempted-recon; sid:200007743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.shruikun.com.cn",nocase; classtype:attempted-recon; sid:200007744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.shsiwei.com.cn",nocase; classtype:attempted-recon; sid:200007745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.suiqiong.com.cn",nocase; classtype:attempted-recon; sid:200007746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.suny365.com.cn",nocase; classtype:attempted-recon; sid:200007747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.taotaomu.com.cn",nocase; classtype:attempted-recon; sid:200007748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.tj-wy.com.cn",nocase; classtype:attempted-recon; sid:200007749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.toulun.com.cn",nocase; classtype:attempted-recon; sid:200007750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.tuanga.com.cn",nocase; classtype:attempted-recon; sid:200007751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.twlcsa95.com.cn",nocase; classtype:attempted-recon; sid:200007752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.vtugoel.com.cn",nocase; classtype:attempted-recon; sid:200007753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.wang114.com.cn",nocase; classtype:attempted-recon; sid:200007754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.wrjhcge.com.cn",nocase; classtype:attempted-recon; sid:200007755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.wuaqrd.com.cn",nocase; classtype:attempted-recon; sid:200007756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.wxznjj.com.cn",nocase; classtype:attempted-recon; sid:200007757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.x-heater.com.cn",nocase; classtype:attempted-recon; sid:200007758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.xbfjnrvy.com.cn",nocase; classtype:attempted-recon; sid:200007759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.xkdibq.com.cn",nocase; classtype:attempted-recon; sid:200007760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.xtensyon.com.cn",nocase; classtype:attempted-recon; sid:200007761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.xuanwai.com.cn",nocase; classtype:attempted-recon; sid:200007762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.yaoshuang.com.cn",nocase; classtype:attempted-recon; sid:200007763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.zglyjzl.com.cn",nocase; classtype:attempted-recon; sid:200007764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.zhangtun.com.cn",nocase; classtype:attempted-recon; sid:200007765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.zhaopang.com.cn",nocase; classtype:attempted-recon; sid:200007766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.zhouluobu.com.cn",nocase; classtype:attempted-recon; sid:200007767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mymweb-owner.at.ua",nocase; classtype:attempted-recon; sid:200007768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mynzsjh.top",nocase; classtype:attempted-recon; sid:200007769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mypayslip.sutherlandglobal.cm",nocase; classtype:attempted-recon; sid:200007770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myshedbuilder.com",nocase; classtype:attempted-recon; sid:200007771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mysticalmasks.xyz",nocase; classtype:attempted-recon; sid:200007772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mytechstop.in",nocase; classtype:attempted-recon; sid:200007773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mytheamsauthecent.wapgem.com",nocase; classtype:attempted-recon; sid:200007774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mytoshop.com",nocase; classtype:attempted-recon; sid:200007775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"n-naoko-0319.github.io",nocase; classtype:attempted-recon; sid:200007776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nab-alert.mobi",nocase; classtype:attempted-recon; sid:200007777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nab-www.303.si",nocase; classtype:attempted-recon; sid:200007778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nadudana.com.au",nocase; classtype:attempted-recon; sid:200007779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"najboljeuslugezavas.betterservicesforyou.com",nocase; classtype:attempted-recon; sid:200007780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"namamiproductions.com",nocase; classtype:attempted-recon; sid:200007781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"namele.marpuasabentar.workers.dev",nocase; classtype:attempted-recon; sid:200007782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"namelessajaa.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200007783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"namelesstr.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200007784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nanouchimusic.com",nocase; classtype:attempted-recon; sid:200007785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"napffx5.com",nocase; classtype:attempted-recon; sid:200007786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nardellacpa.com",nocase; classtype:attempted-recon; sid:200007787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nascimentoadvg.com",nocase; classtype:attempted-recon; sid:200007788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nasdaqet.com",nocase; classtype:attempted-recon; sid:200007789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"natalsafety.com.br",nocase; classtype:attempted-recon; sid:200007790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nationgreece-nbg.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nattynetworks.com",nocase; classtype:attempted-recon; sid:200007792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"naturhouse.sk",nocase; classtype:attempted-recon; sid:200007793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nautilusswimmingclub.com",nocase; classtype:attempted-recon; sid:200007794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi-drops.ru",nocase; classtype:attempted-recon; sid:200007795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi6.net",nocase; classtype:attempted-recon; sid:200007796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi66.com",nocase; classtype:attempted-recon; sid:200007797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navi9.com",nocase; classtype:attempted-recon; sid:200007798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navivincere.cc",nocase; classtype:attempted-recon; sid:200007799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navivincere.org",nocase; classtype:attempted-recon; sid:200007800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navyfederal.org.serlinkgan.com",nocase; classtype:attempted-recon; sid:200007801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"navyonlin5.temp.swtest.ru",nocase; classtype:attempted-recon; sid:200007802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nayanielectronics.com",nocase; classtype:attempted-recon; sid:200007803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nbfgcv.jjighvc.cn",nocase; classtype:attempted-recon; sid:200007804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ndeflawtechnologies.com",nocase; classtype:attempted-recon; sid:200007805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"necessitymag.com",nocase; classtype:attempted-recon; sid:200007806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"necudneflirty.com",nocase; classtype:attempted-recon; sid:200007807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nedbankqa.flowblocks.com",nocase; classtype:attempted-recon; sid:200007808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"negafruit.ir",nocase; classtype:attempted-recon; sid:200007809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"neivaecosta.adv.br",nocase; classtype:attempted-recon; sid:200007810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nerestera.onrender.com",nocase; classtype:attempted-recon; sid:200007811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflix-tv.cf",nocase; classtype:attempted-recon; sid:200007812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflix-uk.duckdns.org",nocase; classtype:attempted-recon; sid:200007813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflix01.ipq.co",nocase; classtype:attempted-recon; sid:200007814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflixguiltless-guide.surge.sh",nocase; classtype:attempted-recon; sid:200007815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflixsecurity01.duckdns.org",nocase; classtype:attempted-recon; sid:200007816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netflixsecurity07.duckdns.org",nocase; classtype:attempted-recon; sid:200007817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nets-7be83.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netstation2.aplus.jp.mscusieoa.com",nocase; classtype:attempted-recon; sid:200007819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netstation2.aplus.yjtewt.com",nocase; classtype:attempted-recon; sid:200007820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"networksolutions-fd.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"networksolutions-fd.web.app",nocase; classtype:attempted-recon; sid:200007822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"neversencommun.fr",nocase; classtype:attempted-recon; sid:200007823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"new-add-review.com",nocase; classtype:attempted-recon; sid:200007824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"new.newitventure.com",nocase; classtype:attempted-recon; sid:200007825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newevent22.com",nocase; classtype:attempted-recon; sid:200007826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newhopemakassar.co.id",nocase; classtype:attempted-recon; sid:200007827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newtondancecompany.com",nocase; classtype:attempted-recon; sid:200007828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"newty.rf.gd",nocase; classtype:attempted-recon; sid:200007829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nexoinmobiliario.pe",nocase; classtype:attempted-recon; sid:200007830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfghr.gz0y8c.cn",nocase; classtype:attempted-recon; sid:200007831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nftio.online",nocase; classtype:attempted-recon; sid:200007832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nftracking.io",nocase; classtype:attempted-recon; sid:200007833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfts-pro.net",nocase; classtype:attempted-recon; sid:200007834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nfwyx3.blvvb.tech625.com",nocase; classtype:attempted-recon; sid:200007835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ngmc.ca",nocase; classtype:attempted-recon; sid:200007836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ngodnaworld.com",nocase; classtype:attempted-recon; sid:200007837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhantienbanking24quocte.weebly.com",nocase; classtype:attempted-recon; sid:200007838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhantienquocteunibanking.weebly.com",nocase; classtype:attempted-recon; sid:200007839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhantienquoctevnpasswesternunion.weebly.com",nocase; classtype:attempted-recon; sid:200007840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhattinsteel.com",nocase; classtype:attempted-recon; sid:200007841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhk-tvs-japan.icu",nocase; classtype:attempted-recon; sid:200007842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhri.net",nocase; classtype:attempted-recon; sid:200007843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nhsapply-covid-pass.com",nocase; classtype:attempted-recon; sid:200007844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"niagarapower.com",nocase; classtype:attempted-recon; sid:200007845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nice-moss-059dd8003.1.azurestaticapps.net",nocase; classtype:attempted-recon; sid:200007846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nicoleaction.com",nocase; classtype:attempted-recon; sid:200007847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nicoledruschnewitz.clickfunnels.com",nocase; classtype:attempted-recon; sid:200007848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nieuwpoortbe.godaddysites.com",nocase; classtype:attempted-recon; sid:200007849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nikkofarmer.com",nocase; classtype:attempted-recon; sid:200007850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nincloud-dff9d.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nitro.neeve.co",nocase; classtype:attempted-recon; sid:200007852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nivel.co.me",nocase; classtype:attempted-recon; sid:200007853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nizotchauffage.bilty.be",nocase; classtype:attempted-recon; sid:200007854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"njdnhxiddo.duckdns.org",nocase; classtype:attempted-recon; sid:200007855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nlog.leshazlewood.com",nocase; classtype:attempted-recon; sid:200007856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nlrxh5.webwave.dev",nocase; classtype:attempted-recon; sid:200007857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nodeaid.co",nocase; classtype:attempted-recon; sid:200007858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"noheam-thear.hostfree.pw",nocase; classtype:attempted-recon; sid:200007859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"noisy-cake-47d3.nh29901021139.workers.dev",nocase; classtype:attempted-recon; sid:200007860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"noisy-wildflower-6765.on.fleek.co",nocase; classtype:attempted-recon; sid:200007861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nollywoodnuggets.tv",nocase; classtype:attempted-recon; sid:200007862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nordiadata.com",nocase; classtype:attempted-recon; sid:200007863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"norisexrx.monster",nocase; classtype:attempted-recon; sid:200007864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"normalangstonrealestate.com",nocase; classtype:attempted-recon; sid:200007865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nosposte458d.yolasite.com",nocase; classtype:attempted-recon; sid:200007866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nossas-solucoes-agora.com",nocase; classtype:attempted-recon; sid:200007867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notife.help.institutepages.workers.dev",nocase; classtype:attempted-recon; sid:200007868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notification-fb.secure-pages.workers.dev",nocase; classtype:attempted-recon; sid:200007869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"notify-me.link",nocase; classtype:attempted-recon; sid:200007870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nour-ala-nour.com",nocase; classtype:attempted-recon; sid:200007871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nourayatravel.com",nocase; classtype:attempted-recon; sid:200007872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"novidadenoar.com",nocase; classtype:attempted-recon; sid:200007873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nroedreamcare.com",nocase; classtype:attempted-recon; sid:200007874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ns1.newblowork06.gq",nocase; classtype:attempted-recon; sid:200007875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nt.embluemail.com",nocase; classtype:attempted-recon; sid:200007876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nucleoresultado.com",nocase; classtype:attempted-recon; sid:200007877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuevo-tuya-2.hostfree.pw",nocase; classtype:attempted-recon; sid:200007878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuevoo365tuya.hostfree.pw",nocase; classtype:attempted-recon; sid:200007879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuevoo365tuya01.hostfree.pw",nocase; classtype:attempted-recon; sid:200007880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuevoo365tuya120.hostfree.pw",nocase; classtype:attempted-recon; sid:200007881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuevoo365tuyya1.hostfree.pw",nocase; classtype:attempted-recon; sid:200007882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuevoo365tuyya14.hostfree.pw",nocase; classtype:attempted-recon; sid:200007883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nuhefun.cn",nocase; classtype:attempted-recon; sid:200007884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nvidia1651665403.zendesk.com",nocase; classtype:attempted-recon; sid:200007885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nwrrmayzpv.duckdns.org",nocase; classtype:attempted-recon; sid:200007886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nxl58s.hyperphp.com",nocase; classtype:attempted-recon; sid:200007887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nyestriasztas.hu",nocase; classtype:attempted-recon; sid:200007888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nyiksaulekel.66ghz.com",nocase; classtype:attempted-recon; sid:200007889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nymo.ee",nocase; classtype:attempted-recon; sid:200007890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nysestarts.com",nocase; classtype:attempted-recon; sid:200007891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nysetbtck.com",nocase; classtype:attempted-recon; sid:200007892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nysethkpd.com",nocase; classtype:attempted-recon; sid:200007893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oaklandsglobal.co.uk",nocase; classtype:attempted-recon; sid:200007894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oannes-consulting.de",nocase; classtype:attempted-recon; sid:200007895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oauth-lo4gin-web03mail-2client.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oauthwebmail0ecwwsaee-70ec3183.web.app",nocase; classtype:attempted-recon; sid:200007897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"objectstorage.me-abudhabi-1.oraclecloud.com",nocase; classtype:attempted-recon; sid:200007898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"objectstorage.me-dubai-1.oraclecloud.com",nocase; classtype:attempted-recon; sid:200007899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"observinglife.net",nocase; classtype:attempted-recon; sid:200007900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ocioturismogalicia.com",nocase; classtype:attempted-recon; sid:200007901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ocnewyork.net",nocase; classtype:attempted-recon; sid:200007902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oendhe.fovono.top",nocase; classtype:attempted-recon; sid:200007903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oferta-130.ordernew224466.info",nocase; classtype:attempted-recon; sid:200007904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ofetles-malus.com",nocase; classtype:attempted-recon; sid:200007905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"off6767878887688ce88.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"off6767878887688ce88.web.app",nocase; classtype:attempted-recon; sid:200007907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"offic4280692.sitebuilder.name.tools",nocase; classtype:attempted-recon; sid:200007908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office-filedesk.myportfolio.com",nocase; classtype:attempted-recon; sid:200007909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office-invauth13425.zeknotarzo.workers.dev",nocase; classtype:attempted-recon; sid:200007910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office-secure-adope-fileshare.pages.dev",nocase; classtype:attempted-recon; sid:200007911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office.ways-status.workers.dev",nocase; classtype:attempted-recon; sid:200007912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365emailverification9.godaddysites.com",nocase; classtype:attempted-recon; sid:200007913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office365projectmemo.myportfolio.com",nocase; classtype:attempted-recon; sid:200007914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office39283c79b6d239c952b821624b0e6a26c3383c79b6d239c952b821624.emailnow2.workers.dev",nocase; classtype:attempted-recon; sid:200007915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"office80f8a649b49eef411c04a82b3e39b85b80f8a649b49eef411c04aa8fd.onedriveoffice.workers.dev",nocase; classtype:attempted-recon; sid:200007916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officedrive6860908c937775e0f58fe179754804126860908c937775e0f58f.onedrivesgf.workers.dev",nocase; classtype:attempted-recon; sid:200007917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officedrivef7848b1089c0b94ba05f0ee7a32b53dbf7848b1089c0b94ba05f.drivecheckmails.workers.dev",nocase; classtype:attempted-recon; sid:200007918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officedrivesxe85bdf3fb68145124c57c78d1f798930e85bdf3fb68145124c.sureonedrive.workers.dev",nocase; classtype:attempted-recon; sid:200007919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeee.bubbleapps.io",nocase; classtype:attempted-recon; sid:200007920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officelinelinks.com",nocase; classtype:attempted-recon; sid:200007921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officematsolutions.co.za",nocase; classtype:attempted-recon; sid:200007922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonedrivea3188350d116c56f4640139145cbca08a3188350d116c56f4.officepos.workers.dev",nocase; classtype:attempted-recon; sid:200007923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officeonline.manifo.com",nocase; classtype:attempted-recon; sid:200007924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"offices7b6ce136c0aad19d8d3ef2d19e7d8b515989e136c0aad19d8d3ef2d1.officesgm.workers.dev",nocase; classtype:attempted-recon; sid:200007925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"officialliker.co",nocase; classtype:attempted-recon; sid:200007926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"offyourplate.my.idaptive.app",nocase; classtype:attempted-recon; sid:200007927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ohfi-innovationdepartment.web.app",nocase; classtype:attempted-recon; sid:200007928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ohlambie.com",nocase; classtype:attempted-recon; sid:200007929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ohw.tf",nocase; classtype:attempted-recon; sid:200007930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oinr-a4b16.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ojjmemlkc.hostfree.pw",nocase; classtype:attempted-recon; sid:200007932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"okdlxjg.top",nocase; classtype:attempted-recon; sid:200007933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"olabert.playcode.io",nocase; classtype:attempted-recon; sid:200007934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"old-bar-2200.on.fleek.co",nocase; classtype:attempted-recon; sid:200007935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"old-file-surf-978b.theattdrops6111.workers.dev",nocase; classtype:attempted-recon; sid:200007936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"old.martobang.workers.dev",nocase; classtype:attempted-recon; sid:200007937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oldconfezfzfrenc.leaseholdconference.co.uk",nocase; classtype:attempted-recon; sid:200007938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oljaklve14.vip",nocase; classtype:attempted-recon; sid:200007939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"olmupdtesattwebserves-107522.square.site",nocase; classtype:attempted-recon; sid:200007940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oluwarantinmialafia.godaddysites.com",nocase; classtype:attempted-recon; sid:200007941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"olx-pl-xhp.accept8145.me",nocase; classtype:attempted-recon; sid:200007942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"olympus-holdings.com",nocase; classtype:attempted-recon; sid:200007943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omareturnian.com",nocase; classtype:attempted-recon; sid:200007944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh1.web.app",nocase; classtype:attempted-recon; sid:200007946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh10.web.app",nocase; classtype:attempted-recon; sid:200007948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh11.web.app",nocase; classtype:attempted-recon; sid:200007950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh12.web.app",nocase; classtype:attempted-recon; sid:200007952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh2.web.app",nocase; classtype:attempted-recon; sid:200007954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh3.web.app",nocase; classtype:attempted-recon; sid:200007956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh4.web.app",nocase; classtype:attempted-recon; sid:200007958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh5.web.app",nocase; classtype:attempted-recon; sid:200007960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh6.web.app",nocase; classtype:attempted-recon; sid:200007962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh7.web.app",nocase; classtype:attempted-recon; sid:200007964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh8.web.app",nocase; classtype:attempted-recon; sid:200007966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omentiandh9.web.app",nocase; classtype:attempted-recon; sid:200007968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"omth.in",nocase; classtype:attempted-recon; sid:200007969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onba.ch-sgkb.info",nocase; classtype:attempted-recon; sid:200007970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive-share.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive-share.web.app",nocase; classtype:attempted-recon; sid:200007972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedriveoffice28432c5b1f27614986e6d114fb3cb70028432c5b1f2761498.checkonedrives.workers.dev",nocase; classtype:attempted-recon; sid:200007973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onee-a0488.web.app",nocase; classtype:attempted-recon; sid:200007974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oneone-19cd8.web.app",nocase; classtype:attempted-recon; sid:200007975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onescanner.web.app",nocase; classtype:attempted-recon; sid:200007976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-bwbank.myddns.me",nocase; classtype:attempted-recon; sid:200007977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-ksocliendkb-de.ga",nocase; classtype:attempted-recon; sid:200007978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-omgebung.de.upgradepage.cc",nocase; classtype:attempted-recon; sid:200007979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-pdf-portal.visura.co",nocase; classtype:attempted-recon; sid:200007980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online.au-auth-dashboard.com",nocase; classtype:attempted-recon; sid:200007981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online.validationsynonyms.org",nocase; classtype:attempted-recon; sid:200007982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinebncoitau.x10.mx",nocase; classtype:attempted-recon; sid:200007983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinebncopyitau.x10.mx",nocase; classtype:attempted-recon; sid:200007984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlyforbuzness.weebly.com",nocase; classtype:attempted-recon; sid:200007985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlysportplus.com",nocase; classtype:attempted-recon; sid:200007986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onyx77.net",nocase; classtype:attempted-recon; sid:200007987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ooo4-67e89.firebaseapp.com",nocase; classtype:attempted-recon; sid:200007988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ooo4-67e89.web.app",nocase; classtype:attempted-recon; sid:200007989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ooosibpromsnab.ru",nocase; classtype:attempted-recon; sid:200007990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opcnseas.com",nocase; classtype:attempted-recon; sid:200007991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opdateringsrvc.com",nocase; classtype:attempted-recon; sid:200007992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opemcea.io",nocase; classtype:attempted-recon; sid:200007993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"open-sea-a4fef.web.app",nocase; classtype:attempted-recon; sid:200007994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea-event.io",nocase; classtype:attempted-recon; sid:200007995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea-event.su",nocase; classtype:attempted-recon; sid:200007996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea-help.com",nocase; classtype:attempted-recon; sid:200007997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea-lottery.com",nocase; classtype:attempted-recon; sid:200007998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea-token.sale",nocase; classtype:attempted-recon; sid:200007999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea-tools.net",nocase; classtype:attempted-recon; sid:200008000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opensea.win",nocase; classtype:attempted-recon; sid:200008001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"openseaapikey.com",nocase; classtype:attempted-recon; sid:200008002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"openseaspps.com",nocase; classtype:attempted-recon; sid:200008003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"optimizeauthenticapp.online",nocase; classtype:attempted-recon; sid:200008004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"optumbank.info",nocase; classtype:attempted-recon; sid:200008005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"optus-support.net",nocase; classtype:attempted-recon; sid:200008006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"optydistribution.ca",nocase; classtype:attempted-recon; sid:200008007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"opus.co.vu",nocase; classtype:attempted-recon; sid:200008008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oqsjkagj5kjdf.shop",nocase; classtype:attempted-recon; sid:200008009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orabote.name",nocase; classtype:attempted-recon; sid:200008010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange-darkness-4210.on.fleek.co",nocase; classtype:attempted-recon; sid:200008011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange-security.cloud.coreoz.com",nocase; classtype:attempted-recon; sid:200008012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange.iobeya.com",nocase; classtype:attempted-recon; sid:200008013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange.sphinxonline.net",nocase; classtype:attempted-recon; sid:200008014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orange.windagrande78.workers.dev",nocase; classtype:attempted-recon; sid:200008015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orangess.contactin.bio",nocase; classtype:attempted-recon; sid:200008016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orcube-bf0cf.web.app",nocase; classtype:attempted-recon; sid:200008017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orico.jiangjinfj.com",nocase; classtype:attempted-recon; sid:200008018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orico.yanbianzf.com",nocase; classtype:attempted-recon; sid:200008019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"originmirrors.com",nocase; classtype:attempted-recon; sid:200008020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"orionlandscapeco.com",nocase; classtype:attempted-recon; sid:200008021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ormantencs112.odoo.com",nocase; classtype:attempted-recon; sid:200008022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ornima.com",nocase; classtype:attempted-recon; sid:200008023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"osaafbbs.com",nocase; classtype:attempted-recon; sid:200008024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"osmanotomotiv.com",nocase; classtype:attempted-recon; sid:200008025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"otomoto-h229.net",nocase; classtype:attempted-recon; sid:200008026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"otomoto3452.com",nocase; classtype:attempted-recon; sid:200008027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"otp-hoantatnhantien-otp.weebly.com",nocase; classtype:attempted-recon; sid:200008028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oude-site.hadiethshop.nl",nocase; classtype:attempted-recon; sid:200008029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oumn.ineav-souerietrmecm.cc",nocase; classtype:attempted-recon; sid:200008030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlok.formaloo.net",nocase; classtype:attempted-recon; sid:200008031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlook1541489.webcindario.com",nocase; classtype:attempted-recon; sid:200008032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlookadminsupport.softr.app",nocase; classtype:attempted-recon; sid:200008033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlookonline.myportfolio.com",nocase; classtype:attempted-recon; sid:200008034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlookowa.myportfolio.com",nocase; classtype:attempted-recon; sid:200008035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"outlookowalive.myportfolio.com",nocase; classtype:attempted-recon; sid:200008036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovh-cl0ud.web.app",nocase; classtype:attempted-recon; sid:200008037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovh-dfh.web.app",nocase; classtype:attempted-recon; sid:200008038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovh-link.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovh-link.web.app",nocase; classtype:attempted-recon; sid:200008040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovhh-0.web.app",nocase; classtype:attempted-recon; sid:200008041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ovhh-19f4a.web.app",nocase; classtype:attempted-recon; sid:200008042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ow1nbdhhjdmvdf.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"owaweb3-6-5.mailauthorize.workers.dev",nocase; classtype:attempted-recon; sid:200008044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oyqnjgl.top",nocase; classtype:attempted-recon; sid:200008045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ozboya.com",nocase; classtype:attempted-recon; sid:200008046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ozhenl-host.preview-domain.com",nocase; classtype:attempted-recon; sid:200008047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p0llyg0n-org.tk",nocase; classtype:attempted-recon; sid:200008048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p1ch4bkig.webcindario.com",nocase; classtype:attempted-recon; sid:200008049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"p46es3tt1n6ssystem.co.vu",nocase; classtype:attempted-recon; sid:200008050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paagespnaltycekscrtyupdte.co.vu",nocase; classtype:attempted-recon; sid:200008051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pacakeswap.ml",nocase; classtype:attempted-recon; sid:200008052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"package2021.blogspot.ba",nocase; classtype:attempted-recon; sid:200008053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"package2021.blogspot.bg",nocase; classtype:attempted-recon; sid:200008054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"package2021.blogspot.com",nocase; classtype:attempted-recon; sid:200008055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"page-community-support2022.gq",nocase; classtype:attempted-recon; sid:200008056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"page-recovery-identity2022.com",nocase; classtype:attempted-recon; sid:200008057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"page.appmobilepages.workers.dev",nocase; classtype:attempted-recon; sid:200008058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pageaccountviolatedterms.co.vu",nocase; classtype:attempted-recon; sid:200008059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagecommunitystandards-verifi-459213.asia",nocase; classtype:attempted-recon; sid:200008060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pageidentity2022.com",nocase; classtype:attempted-recon; sid:200008061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pageidentitysafetylive25440.co.vu",nocase; classtype:attempted-recon; sid:200008062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pageperpectinpaseloginb.co.vu",nocase; classtype:attempted-recon; sid:200008063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagerecoveryidentity2.com",nocase; classtype:attempted-recon; sid:200008064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-marvelous-project.webflow.io",nocase; classtype:attempted-recon; sid:200008065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages-protetions-updates2022.co",nocase; classtype:attempted-recon; sid:200008066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages.secure-accts.workers.dev",nocase; classtype:attempted-recon; sid:200008067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagescommunitystandards2022.tk",nocase; classtype:attempted-recon; sid:200008068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagesinstreamadsjoinkitaletsgoooooooooo.co.vu",nocase; classtype:attempted-recon; sid:200008069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagessettings100431988437230.co.vu",nocase; classtype:attempted-recon; sid:200008070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagrl.com",nocase; classtype:attempted-recon; sid:200008071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paiementboncoin.com",nocase; classtype:attempted-recon; sid:200008072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paket-info.com",nocase; classtype:attempted-recon; sid:200008073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paketinfo.myscriptcase.com",nocase; classtype:attempted-recon; sid:200008074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"palito2106.hostfree.pw",nocase; classtype:attempted-recon; sid:200008075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"palmm.ps",nocase; classtype:attempted-recon; sid:200008076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"panaceaservices.biz",nocase; classtype:attempted-recon; sid:200008077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancaekeswap.cloud",nocase; classtype:attempted-recon; sid:200008078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancake-swapp.com",nocase; classtype:attempted-recon; sid:200008079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancake7wop.com",nocase; classtype:attempted-recon; sid:200008080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakemobile.com",nocase; classtype:attempted-recon; sid:200008081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakesvvap.financial",nocase; classtype:attempted-recon; sid:200008082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswa-p.com",nocase; classtype:attempted-recon; sid:200008083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap-cripto.com",nocase; classtype:attempted-recon; sid:200008084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap-floki.finance",nocase; classtype:attempted-recon; sid:200008085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap-reef.com",nocase; classtype:attempted-recon; sid:200008086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.finance.tradechange.in",nocase; classtype:attempted-recon; sid:200008087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.himotechglobal.com",nocase; classtype:attempted-recon; sid:200008088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.men",nocase; classtype:attempted-recon; sid:200008089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.solutions",nocase; classtype:attempted-recon; sid:200008090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswap.trading",nocase; classtype:attempted-recon; sid:200008091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswapclone.com",nocase; classtype:attempted-recon; sid:200008092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswappshop.blogspot.com",nocase; classtype:attempted-recon; sid:200008093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswapsupport.co",nocase; classtype:attempted-recon; sid:200008094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakeswapz.blogspot.com",nocase; classtype:attempted-recon; sid:200008095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancakesweb.info",nocase; classtype:attempted-recon; sid:200008096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancalteswap.finance",nocase; classtype:attempted-recon; sid:200008097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"panckaceswap.finance",nocase; classtype:attempted-recon; sid:200008098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pancokeswope.finance.mechadda.com",nocase; classtype:attempted-recon; sid:200008099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"panel-arsura.com",nocase; classtype:attempted-recon; sid:200008100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"panelasperfeitas.info",nocase; classtype:attempted-recon; sid:200008101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"panelweb-4cae2.web.app",nocase; classtype:attempted-recon; sid:200008102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"panpaus.com",nocase; classtype:attempted-recon; sid:200008103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paper8954.godaddysites.com",nocase; classtype:attempted-recon; sid:200008104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"papperfile.godaddysites.com",nocase; classtype:attempted-recon; sid:200008105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paragua.x10.mx",nocase; classtype:attempted-recon; sid:200008106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parahuyhomepy.x10.mx",nocase; classtype:attempted-recon; sid:200008107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parajuniorline22.x10.mx",nocase; classtype:attempted-recon; sid:200008108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parallelmetaspace.com",nocase; classtype:attempted-recon; sid:200008109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parc-attractions.com",nocase; classtype:attempted-recon; sid:200008110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parceiro-magazineluiza.com",nocase; classtype:attempted-recon; sid:200008111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parfumieftin.eu",nocase; classtype:attempted-recon; sid:200008112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"park.great-site.net",nocase; classtype:attempted-recon; sid:200008113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"parla-con-noi-security.com",nocase; classtype:attempted-recon; sid:200008114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"passionfruit4576261.brizy.site",nocase; classtype:attempted-recon; sid:200008115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"passwordexpirynotice.mittimunafa.com",nocase; classtype:attempted-recon; sid:200008116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pateltutorials.com",nocase; classtype:attempted-recon; sid:200008117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pathospitals.com",nocase; classtype:attempted-recon; sid:200008118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"patient-cell-40f5.updatedlogmylogin.workers.dev",nocase; classtype:attempted-recon; sid:200008119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"patient-cloud-9191.on.fleek.co",nocase; classtype:attempted-recon; sid:200008120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paxful.com.ph",nocase; classtype:attempted-recon; sid:200008121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paxful53.com",nocase; classtype:attempted-recon; sid:200008122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paxfulbi.com",nocase; classtype:attempted-recon; sid:200008123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pay2bd.com",nocase; classtype:attempted-recon; sid:200008124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payee.cancellation28.com",nocase; classtype:attempted-recon; sid:200008125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payee.cancellation990.com",nocase; classtype:attempted-recon; sid:200008126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payexitotuya.hostfree.pw",nocase; classtype:attempted-recon; sid:200008127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payment-error0685630068454523605765575463.weebly.com",nocase; classtype:attempted-recon; sid:200008128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payment-failure.com",nocase; classtype:attempted-recon; sid:200008129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payment-remittance-advice.myportfolio.com",nocase; classtype:attempted-recon; sid:200008130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payment.eprizedrop.com",nocase; classtype:attempted-recon; sid:200008131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payment.vipdeals365.com",nocase; classtype:attempted-recon; sid:200008132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payment8hold.my-vigor.de",nocase; classtype:attempted-recon; sid:200008133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paymentfailed.com",nocase; classtype:attempted-recon; sid:200008134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paymentnotificationnow.blogspot.com",nocase; classtype:attempted-recon; sid:200008135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paymydoctor.ltd",nocase; classtype:attempted-recon; sid:200008136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypal-pays.gitlab.io",nocase; classtype:attempted-recon; sid:200008137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypal.com.0.security-confirmation.d72b69c8e37aec662e13e39d929d6e3d.as2.2u.se",nocase; classtype:attempted-recon; sid:200008138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypal.mycaps.me",nocase; classtype:attempted-recon; sid:200008139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypay-netsecurity.com",nocase; classtype:attempted-recon; sid:200008140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypay-verify.com",nocase; classtype:attempted-recon; sid:200008141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"payteampaal5400jkdsfuhdbf-8w99i3krg-techteam001.vercel.app",nocase; classtype:attempted-recon; sid:200008142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pcstech.com.py",nocase; classtype:attempted-recon; sid:200008143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pcsystemscelaya.com",nocase; classtype:attempted-recon; sid:200008144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf-cd974.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf-cloud-document.weeblysite.com",nocase; classtype:attempted-recon; sid:200008146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf-shared-cloud.project-deec.workers.dev",nocase; classtype:attempted-recon; sid:200008147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf-sharefile-doc.weeblysite.com",nocase; classtype:attempted-recon; sid:200008148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdf.file-documents.workers.dev",nocase; classtype:attempted-recon; sid:200008149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdfsecured.mystrikingly.com",nocase; classtype:attempted-recon; sid:200008150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pederopeder.com",nocase; classtype:attempted-recon; sid:200008151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pekao-bank.co",nocase; classtype:attempted-recon; sid:200008152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pemblokiranaccountt.webnode.page",nocase; classtype:attempted-recon; sid:200008153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pemulihan-identyty.webnode.page",nocase; classtype:attempted-recon; sid:200008154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pendingbecudepoholdsviews.dynvpn.de",nocase; classtype:attempted-recon; sid:200008155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pepplerok.com",nocase; classtype:attempted-recon; sid:200008156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perfectenergy.in",nocase; classtype:attempted-recon; sid:200008157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perfectliker.net",nocase; classtype:attempted-recon; sid:200008158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perfectunionapparel.com",nocase; classtype:attempted-recon; sid:200008159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"performancelocal.com",nocase; classtype:attempted-recon; sid:200008160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"peringatan-pemblokiran532.webnode.com",nocase; classtype:attempted-recon; sid:200008161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"peringatan-verifikasi202.weebly.com",nocase; classtype:attempted-recon; sid:200008162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"peringatanakunfb2k214.webnode.com",nocase; classtype:attempted-recon; sid:200008163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perituza.com",nocase; classtype:attempted-recon; sid:200008164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perportal1.hostfree.pw",nocase; classtype:attempted-recon; sid:200008165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"personalcapial.com",nocase; classtype:attempted-recon; sid:200008166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"personasportal.hostfree.pw",nocase; classtype:attempted-recon; sid:200008167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"petopets.com",nocase; classtype:attempted-recon; sid:200008168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"petra-developments.com",nocase; classtype:attempted-recon; sid:200008169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pfjykejodq.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pfjykejodq.web.app",nocase; classtype:attempted-recon; sid:200008171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pge-increases.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pge-increases.web.app",nocase; classtype:attempted-recon; sid:200008173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pge-joins.web.app",nocase; classtype:attempted-recon; sid:200008174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pge-real.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pge-real.web.app",nocase; classtype:attempted-recon; sid:200008176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pge-scr.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pge-trans.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phamtomapp.com",nocase; classtype:attempted-recon; sid:200008179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phantomwalett.app",nocase; classtype:attempted-recon; sid:200008180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phanttomwallet.com",nocase; classtype:attempted-recon; sid:200008181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phantum-wallet.com",nocase; classtype:attempted-recon; sid:200008182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pharaohuniverse.my.id",nocase; classtype:attempted-recon; sid:200008183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"photoboothrentalmemphistn.com",nocase; classtype:attempted-recon; sid:200008184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"photostock.uns.ac.id",nocase; classtype:attempted-recon; sid:200008185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"phreshphoto.com",nocase; classtype:attempted-recon; sid:200008186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pia-i-rof.godaddysites.com",nocase; classtype:attempted-recon; sid:200008187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pichincha-webs.webcindario.com",nocase; classtype:attempted-recon; sid:200008188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pichinchaaverify.webcindario.com",nocase; classtype:attempted-recon; sid:200008189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"picnic.industries",nocase; classtype:attempted-recon; sid:200008190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"piechnik.ca",nocase; classtype:attempted-recon; sid:200008191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pikay13.github.io",nocase; classtype:attempted-recon; sid:200008192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pilaconsultexx01.xyz",nocase; classtype:attempted-recon; sid:200008193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pilaconsultexx03.xyz",nocase; classtype:attempted-recon; sid:200008194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pilatesmastersprogram.com",nocase; classtype:attempted-recon; sid:200008195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pilatesonline.ie",nocase; classtype:attempted-recon; sid:200008196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pinballfinder.org",nocase; classtype:attempted-recon; sid:200008197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pinkmaids.sg",nocase; classtype:attempted-recon; sid:200008198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"piscinaveronza.com",nocase; classtype:attempted-recon; sid:200008199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pisosfarias-0-polygonon-0.blogspot.com",nocase; classtype:attempted-recon; sid:200008200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"piyijet728.temp.swtest.ru",nocase; classtype:attempted-recon; sid:200008201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"placeboook.com",nocase; classtype:attempted-recon; sid:200008202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plain-meadow-6763.on.fleek.co",nocase; classtype:attempted-recon; sid:200008203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plain-morning-2266.on.fleek.co",nocase; classtype:attempted-recon; sid:200008204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plain.selalusalome.workers.dev",nocase; classtype:attempted-recon; sid:200008205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"planodesaudebradesco.com",nocase; classtype:attempted-recon; sid:200008206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plantsvumdead.com",nocase; classtype:attempted-recon; sid:200008207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plasticaindia.com",nocase; classtype:attempted-recon; sid:200008208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plataf0rmadlgitaldepresta0s.com",nocase; classtype:attempted-recon; sid:200008209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"platex.org",nocase; classtype:attempted-recon; sid:200008210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"play-deikifngsdoms.com",nocase; classtype:attempted-recon; sid:200008211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"play-pegaxy.me",nocase; classtype:attempted-recon; sid:200008212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"playgalagame.app",nocase; classtype:attempted-recon; sid:200008213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"playgirlgold.com",nocase; classtype:attempted-recon; sid:200008214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plentiful-photodiod.godaddysites.com",nocase; classtype:attempted-recon; sid:200008215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plg-polygon-tecnology.blogspot.com",nocase; classtype:attempted-recon; sid:200008216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plotentechheartchea.tk",nocase; classtype:attempted-recon; sid:200008217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ploytck.xyz",nocase; classtype:attempted-recon; sid:200008218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plsus-nkh.sfcargo.cn",nocase; classtype:attempted-recon; sid:200008219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plugtools.com",nocase; classtype:attempted-recon; sid:200008220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pmplglobal.com",nocase; classtype:attempted-recon; sid:200008221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pnjone.com",nocase; classtype:attempted-recon; sid:200008222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pntbiz.co.kr",nocase; classtype:attempted-recon; sid:200008223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poc-rewards-program-c2dfc.web.app",nocase; classtype:attempted-recon; sid:200008224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poconoshotels.com",nocase; classtype:attempted-recon; sid:200008225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pokajca.web.app",nocase; classtype:attempted-recon; sid:200008226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"policemodernschool.in",nocase; classtype:attempted-recon; sid:200008227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poligrafiapias.com",nocase; classtype:attempted-recon; sid:200008228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polishedvcxvb.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200008229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pollyggon.blogspot.com",nocase; classtype:attempted-recon; sid:200008230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pollygon-technologys.com",nocase; classtype:attempted-recon; sid:200008231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pollygonnwalletconect.blogspot.com",nocase; classtype:attempted-recon; sid:200008232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polog86.godaddysites.com",nocase; classtype:attempted-recon; sid:200008233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poloskairto.hu",nocase; classtype:attempted-recon; sid:200008234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polska-allegrolokalnle.345553.fun",nocase; classtype:attempted-recon; sid:200008235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polska-allegrolokalnle.order9997244.shop",nocase; classtype:attempted-recon; sid:200008236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polska-dpd.order70129321.shop",nocase; classtype:attempted-recon; sid:200008237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polska-poczlta.order2231010.shop",nocase; classtype:attempted-recon; sid:200008238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polsygon.com",nocase; classtype:attempted-recon; sid:200008239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygon---technology.blogspot.com",nocase; classtype:attempted-recon; sid:200008240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygon-onlline.blogspot.com",nocase; classtype:attempted-recon; sid:200008241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygon-wallet0.blogspot.com",nocase; classtype:attempted-recon; sid:200008242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonconnecttwallet.blogspot.com",nocase; classtype:attempted-recon; sid:200008243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonexs05.blogspot.com",nocase; classtype:attempted-recon; sid:200008244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonixls-leandra.blogspot.com",nocase; classtype:attempted-recon; sid:200008245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonjan.blogspot.com",nocase; classtype:attempted-recon; sid:200008246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonmac.blogspot.com",nocase; classtype:attempted-recon; sid:200008247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonxls-raylson.blogspot.com",nocase; classtype:attempted-recon; sid:200008248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polygonxlss-antonio.blogspot.com",nocase; classtype:attempted-recon; sid:200008249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"polyqon-technology-connect-wallet.blogspot.com",nocase; classtype:attempted-recon; sid:200008250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poocoin-bsc-charts-token-connect.blogspot.com",nocase; classtype:attempted-recon; sid:200008251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poocoin-connect-app-tokens.blogspot.com",nocase; classtype:attempted-recon; sid:200008252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poqugcu146du.shop",nocase; classtype:attempted-recon; sid:200008253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"porquetelomereces.liveblog365.com",nocase; classtype:attempted-recon; sid:200008254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portal-bci.x10.mx",nocase; classtype:attempted-recon; sid:200008255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portal.cafh.net.br",nocase; classtype:attempted-recon; sid:200008256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portaladmin076.godaddysites.com",nocase; classtype:attempted-recon; sid:200008257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portalclicknegocios.com.br",nocase; classtype:attempted-recon; sid:200008258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portaltuyacupo.hostfree.pw",nocase; classtype:attempted-recon; sid:200008259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"portalxciaxaparticularesloc16-b3cb76.ingress-florina.ewp.live",nocase; classtype:attempted-recon; sid:200008260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"position-exachange-naps.blogspot.com",nocase; classtype:attempted-recon; sid:200008261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"post-at.info-trackings.su",nocase; classtype:attempted-recon; sid:200008262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"posta-magyar.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"posta-magyar.web.app",nocase; classtype:attempted-recon; sid:200008264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"posta.substrat-hygienisierung.de",nocase; classtype:attempted-recon; sid:200008265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postalfees-uk.com",nocase; classtype:attempted-recon; sid:200008266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postaltrasacionalexito.lovestoblog.com",nocase; classtype:attempted-recon; sid:200008267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postch9192.cargo.site",nocase; classtype:attempted-recon; sid:200008268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postinfosendungsstatus.com",nocase; classtype:attempted-recon; sid:200008269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"postmailsrvr-mailbox.web.app",nocase; classtype:attempted-recon; sid:200008270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"potlajsnda.atwebpages.com",nocase; classtype:attempted-recon; sid:200008271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"powersafeenergia.blogspot.com",nocase; classtype:attempted-recon; sid:200008272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"powiadomienia-allegro.42356.net",nocase; classtype:attempted-recon; sid:200008273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"powiadomienia-allegro.73463.net",nocase; classtype:attempted-recon; sid:200008274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"powiadomienia-allegro.73464.net",nocase; classtype:attempted-recon; sid:200008275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"powiadomienia-allegro.73466.net",nocase; classtype:attempted-recon; sid:200008276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"poypolusa.geeosftservices.net",nocase; classtype:attempted-recon; sid:200008277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pplsakuyt17s.shop",nocase; classtype:attempted-recon; sid:200008278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pqiutvavhn758q.shop",nocase; classtype:attempted-recon; sid:200008279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pra-voce-solucoes.com",nocase; classtype:attempted-recon; sid:200008280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"praccntdmoninsdc.co.vu",nocase; classtype:attempted-recon; sid:200008281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"practice22.pages.dev",nocase; classtype:attempted-recon; sid:200008282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preenchenlirocar.gq",nocase; classtype:attempted-recon; sid:200008283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"premium57.web-hosting.com",nocase; classtype:attempted-recon; sid:200008284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preppingconfidence.com",nocase; classtype:attempted-recon; sid:200008285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prestamos.lnterbanks.enbenefit.com",nocase; classtype:attempted-recon; sid:200008286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prgmd.net",nocase; classtype:attempted-recon; sid:200008287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"primeone.org",nocase; classtype:attempted-recon; sid:200008288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prince.ps",nocase; classtype:attempted-recon; sid:200008289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"privacy-update-secu-recovriy-page-protection-association.web.id",nocase; classtype:attempted-recon; sid:200008290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"privacy-update-secu-recovry-page-protection-4565544.web.id",nocase; classtype:attempted-recon; sid:200008291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"privat-538547-web-formular.site",nocase; classtype:attempted-recon; sid:200008292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"private-pdf.iteroageme.workers.dev",nocase; classtype:attempted-recon; sid:200008293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"privato-mps.me",nocase; classtype:attempted-recon; sid:200008294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"priyankasandokar1606.github.io",nocase; classtype:attempted-recon; sid:200008295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pro-nfts.com",nocase; classtype:attempted-recon; sid:200008296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pro.icloudremovaltool.com",nocase; classtype:attempted-recon; sid:200008297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"procedi-ora2022.com",nocase; classtype:attempted-recon; sid:200008298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"procobro.eu",nocase; classtype:attempted-recon; sid:200008299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"procservautomatizacion.com",nocase; classtype:attempted-recon; sid:200008300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prod.dlzwqfn3dv685.amplifyapp.com",nocase; classtype:attempted-recon; sid:200008301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"productsinn.com",nocase; classtype:attempted-recon; sid:200008302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"profescoin.com",nocase; classtype:attempted-recon; sid:200008303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"profiimobiliare.ro",nocase; classtype:attempted-recon; sid:200008304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"profiv.com.br",nocase; classtype:attempted-recon; sid:200008305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project-shared-pdf.shared-securee.workers.dev",nocase; classtype:attempted-recon; sid:200008306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project-sheet-doc.assign-sec.workers.dev",nocase; classtype:attempted-recon; sid:200008307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project5a-ccb03.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project5a-ccb03.web.app",nocase; classtype:attempted-recon; sid:200008309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project5d-b3d37.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project5d-b3d37.web.app",nocase; classtype:attempted-recon; sid:200008311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project8b-770b7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"project8b-770b7.web.app",nocase; classtype:attempted-recon; sid:200008313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"projectfiles.trainercentral.com",nocase; classtype:attempted-recon; sid:200008314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"projectlovewell.com",nocase; classtype:attempted-recon; sid:200008315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promehedinti.ro",nocase; classtype:attempted-recon; sid:200008316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prometheus.asia-pancakeswap.dysnix.org",nocase; classtype:attempted-recon; sid:200008317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promo.internetbeneficios.com",nocase; classtype:attempted-recon; sid:200008318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promo.mycorporate-rewards.net",nocase; classtype:attempted-recon; sid:200008319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promos-junio-ib2.com",nocase; classtype:attempted-recon; sid:200008320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"promos-junio-ib4-1.com",nocase; classtype:attempted-recon; sid:200008321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prontofarmaci.com",nocase; classtype:attempted-recon; sid:200008322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"propair.hu",nocase; classtype:attempted-recon; sid:200008323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"proposal-projects.procesrpguvins.workers.dev",nocase; classtype:attempted-recon; sid:200008324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"propostedusq.com",nocase; classtype:attempted-recon; sid:200008325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prosxsiuser.myfreesites.net",nocase; classtype:attempted-recon; sid:200008326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protect-4d56vca.surge.sh",nocase; classtype:attempted-recon; sid:200008327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protected-message2022-1311615844.cos.na-ashburn.myqcloud.com",nocase; classtype:attempted-recon; sid:200008328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protezioneonlinempsiena.com",nocase; classtype:attempted-recon; sid:200008329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"protonmailemailverification.godaddysites.com",nocase; classtype:attempted-recon; sid:200008330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"proud-grass-0138f421e.1.azurestaticapps.net",nocase; classtype:attempted-recon; sid:200008331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"proud-wildflower-9587.on.fleek.co",nocase; classtype:attempted-recon; sid:200008332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prstamomarzo2022.com",nocase; classtype:attempted-recon; sid:200008333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"prv.estebenfranchisemalgoyr.com",nocase; classtype:attempted-recon; sid:200008334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde13928.info",nocase; classtype:attempted-recon; sid:200008335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde2171.info",nocase; classtype:attempted-recon; sid:200008336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde44532.info",nocase; classtype:attempted-recon; sid:200008337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde6671.info",nocase; classtype:attempted-recon; sid:200008338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde923.info",nocase; classtype:attempted-recon; sid:200008339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde95133.info",nocase; classtype:attempted-recon; sid:200008340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psd2-kunde99772.info",nocase; classtype:attempted-recon; sid:200008341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"psqisoe2.ga",nocase; classtype:attempted-recon; sid:200008342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ptxx.cc",nocase; classtype:attempted-recon; sid:200008343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ptyasmhv.hostfree.pw",nocase; classtype:attempted-recon; sid:200008344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pubgclaimlimited.ww01.my.id",nocase; classtype:attempted-recon; sid:200008345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pubgspin10.duckdns.org",nocase; classtype:attempted-recon; sid:200008346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"publish-p43452-e180057.adobeaemcloud.com",nocase; classtype:attempted-recon; sid:200008347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pulaubiru.xyz",nocase; classtype:attempted-recon; sid:200008348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pulsechain-bridgeintoken.com",nocase; classtype:attempted-recon; sid:200008349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"puntoblu.me",nocase; classtype:attempted-recon; sid:200008350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"purchases-rail-uniprotkb-foundations.trycloudflare.com",nocase; classtype:attempted-recon; sid:200008351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pwibhmalaysia.com.my",nocase; classtype:attempted-recon; sid:200008352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qascloud-6f0ec.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qbocd.csb.app",nocase; classtype:attempted-recon; sid:200008354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qgdsgzeraqfqdfc.blogspot.com",nocase; classtype:attempted-recon; sid:200008355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qhj39hfxqftr.clickfunnels.com",nocase; classtype:attempted-recon; sid:200008356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qija3kdfjk.shop",nocase; classtype:attempted-recon; sid:200008357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qjhcjuq.cluster029.hosting.ovh.net",nocase; classtype:attempted-recon; sid:200008358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qlms1.hyperphp.com",nocase; classtype:attempted-recon; sid:200008359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qqiocgsa195.shop",nocase; classtype:attempted-recon; sid:200008360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qruvauijg1.shop",nocase; classtype:attempted-recon; sid:200008361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qsh74pekkv5e8.clickfunnels.com",nocase; classtype:attempted-recon; sid:200008362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qss1a.hyperphp.com",nocase; classtype:attempted-recon; sid:200008363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qtradeqrf.com",nocase; classtype:attempted-recon; sid:200008364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quarantine-2542022app-1311433986.cos.ap-nanjing.myqcloud.com",nocase; classtype:attempted-recon; sid:200008365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quarantine-mes2742022-1311564033.cos.na-ashburn.myqcloud.com",nocase; classtype:attempted-recon; sid:200008366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quarantine26042022mic-1311531473.cos.ap-seoul.myqcloud.com",nocase; classtype:attempted-recon; sid:200008367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quarantine27042022web-1311564033.cos.ap-nanjing.myqcloud.com",nocase; classtype:attempted-recon; sid:200008368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quarantine29042022app-1311615844.cos.ap-chengdu.myqcloud.com",nocase; classtype:attempted-recon; sid:200008369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quartozecule.cf",nocase; classtype:attempted-recon; sid:200008370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quiet-bonus-7e04.pattiekoss35.workers.dev",nocase; classtype:attempted-recon; sid:200008371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quizzical-mcnulty.185-194-219-163.plesk.page",nocase; classtype:attempted-recon; sid:200008372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quobusmehu.tk",nocase; classtype:attempted-recon; sid:200008373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quote3w90k.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quote53454.web.app",nocase; classtype:attempted-recon; sid:200008375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quote55534.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quote55534.web.app",nocase; classtype:attempted-recon; sid:200008377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quotehf645.web.app",nocase; classtype:attempted-recon; sid:200008378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quotreew4445.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qwweewer67.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qwweewer67.web.app",nocase; classtype:attempted-recon; sid:200008381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qwyetr72634.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qwyetr72634.web.app",nocase; classtype:attempted-recon; sid:200008383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qxprhzi.top",nocase; classtype:attempted-recon; sid:200008384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"r2rtextilesolutions.co.uk",nocase; classtype:attempted-recon; sid:200008385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"r9ogn4.webwave.dev",nocase; classtype:attempted-recon; sid:200008386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rackenfordlabs.com",nocase; classtype:attempted-recon; sid:200008387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"racks-30474.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"racks-d0f02.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"radhikamd.github.io",nocase; classtype:attempted-recon; sid:200008390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"radianceconsulting.net",nocase; classtype:attempted-recon; sid:200008391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakuten-card.co.jp.hfklrs.com",nocase; classtype:attempted-recon; sid:200008392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakuten-card.co.jp.lldbyy.com",nocase; classtype:attempted-recon; sid:200008393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakuten-card.co.jp.sljryy.com",nocase; classtype:attempted-recon; sid:200008394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakuten.weihaimba.com",nocase; classtype:attempted-recon; sid:200008395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rakutenetopd.com",nocase; classtype:attempted-recon; sid:200008396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ramm.net",nocase; classtype:attempted-recon; sid:200008397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rapid-dream-6572.on.fleek.co",nocase; classtype:attempted-recon; sid:200008398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rarlero.ml",nocase; classtype:attempted-recon; sid:200008399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rasaki.weebly.com",nocase; classtype:attempted-recon; sid:200008400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raspy-king-4ed0.settingspaqesapp.workers.dev",nocase; classtype:attempted-recon; sid:200008401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rauchenbergerlenggries.clickfunnels.com",nocase; classtype:attempted-recon; sid:200008402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raulsshack.com",nocase; classtype:attempted-recon; sid:200008403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raycargo.com",nocase; classtype:attempted-recon; sid:200008404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raydinum.com",nocase; classtype:attempted-recon; sid:200008405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raygleslong.ml",nocase; classtype:attempted-recon; sid:200008406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rayidium.com",nocase; classtype:attempted-recon; sid:200008407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"raynau.hyperphp.com",nocase; classtype:attempted-recon; sid:200008408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rbcmontgomery.com",nocase; classtype:attempted-recon; sid:200008409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rbtnr.hostfree.pw",nocase; classtype:attempted-recon; sid:200008410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rceyssenswalthbe.godaddysites.com",nocase; classtype:attempted-recon; sid:200008411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcubebit.bitbucket.io",nocase; classtype:attempted-recon; sid:200008412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcvry.sftyacn.scrthlp.workers.dev",nocase; classtype:attempted-recon; sid:200008413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcvry.sprt.acn-cnfrm.workers.dev",nocase; classtype:attempted-recon; sid:200008414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rdeku.com",nocase; classtype:attempted-recon; sid:200008415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rdhtire.net",nocase; classtype:attempted-recon; sid:200008416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"re-redirection-acc-id923872635122.blogspot.com",nocase; classtype:attempted-recon; sid:200008417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"re-rtcool.weebly.com",nocase; classtype:attempted-recon; sid:200008418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"re.deliveryupdates-websrc.com",nocase; classtype:attempted-recon; sid:200008419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realapes.co",nocase; classtype:attempted-recon; sid:200008420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realesign.com",nocase; classtype:attempted-recon; sid:200008421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realizesolucoes.switzerlandnorth.cloudapp.azure.com",nocase; classtype:attempted-recon; sid:200008422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realsaude.pt",nocase; classtype:attempted-recon; sid:200008423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realtymeets.com",nocase; classtype:attempted-recon; sid:200008424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebategrow.com",nocase; classtype:attempted-recon; sid:200008425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"received-file-93fg.godaddysites.com",nocase; classtype:attempted-recon; sid:200008426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"receivemoneyinternationally-westernunion.weebly.com",nocase; classtype:attempted-recon; sid:200008427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rechnunge.wpengine.com",nocase; classtype:attempted-recon; sid:200008428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recover-metamask.net",nocase; classtype:attempted-recon; sid:200008429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recoverphrase455.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recovery-fb.secure-acct.workers.dev",nocase; classtype:attempted-recon; sid:200008431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rectifystation.com",nocase; classtype:attempted-recon; sid:200008432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recuperaciondecuenta-12b0.czemarkojo.workers.dev",nocase; classtype:attempted-recon; sid:200008433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recvry-page-protection-comunity-problems-4511854276.web.id",nocase; classtype:attempted-recon; sid:200008434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recvry-page-protection-comunity-problems-4511854278.web.id",nocase; classtype:attempted-recon; sid:200008435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"recvry-page-protection-comunity-problems-45119945.web.id",nocase; classtype:attempted-recon; sid:200008436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"red-water-a93d.lease542.workers.dev",nocase; classtype:attempted-recon; sid:200008437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redbysfrgroupebox.myfreesites.net",nocase; classtype:attempted-recon; sid:200008438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redeem-microsoft-code.sitey.me",nocase; classtype:attempted-recon; sid:200008439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rediractionid547012016089540218057.blogspot.com",nocase; classtype:attempted-recon; sid:200008440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redirection-b836d.web.app",nocase; classtype:attempted-recon; sid:200008441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reedemcollect.my.id",nocase; classtype:attempted-recon; sid:200008442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"refffund-b388db.ingress-erytho.ewp.live",nocase; classtype:attempted-recon; sid:200008443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reg-3da7f.web.app",nocase; classtype:attempted-recon; sid:200008444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reg.chaindaohang.com",nocase; classtype:attempted-recon; sid:200008445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reg123r.web.app",nocase; classtype:attempted-recon; sid:200008446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regamtas.xyz",nocase; classtype:attempted-recon; sid:200008447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regionalezeknozoyda.flazio.com",nocase; classtype:attempted-recon; sid:200008448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regionrsk.org",nocase; classtype:attempted-recon; sid:200008449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"regioon.duckdns.org",nocase; classtype:attempted-recon; sid:200008450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"register.pinnedfun.com",nocase; classtype:attempted-recon; sid:200008451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"register.templejoy.net",nocase; classtype:attempted-recon; sid:200008452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"registradigital.com",nocase; classtype:attempted-recon; sid:200008453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reglic.in",nocase; classtype:attempted-recon; sid:200008454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reignbike.com",nocase; classtype:attempted-recon; sid:200008455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reinforcementdetail.co.uk",nocase; classtype:attempted-recon; sid:200008456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reject-payments-help.com",nocase; classtype:attempted-recon; sid:200008457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"religie.ordevansintjacob.org",nocase; classtype:attempted-recon; sid:200008458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"remototarget.ihostfull.com",nocase; classtype:attempted-recon; sid:200008459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"remove-restrictions-jp.daoxflk.cn",nocase; classtype:attempted-recon; sid:200008460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"remove-restrictions-jp.ie960.cn",nocase; classtype:attempted-recon; sid:200008461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renouvellement-2022.com",nocase; classtype:attempted-recon; sid:200008462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"repairprotectionservice-yourupdate.web.id",nocase; classtype:attempted-recon; sid:200008463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"repl-mess.myfreesites.net",nocase; classtype:attempted-recon; sid:200008464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"request.br.ironmountain.com",nocase; classtype:attempted-recon; sid:200008465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"requestinteriumtlc6e6requestin.godaddysites.com",nocase; classtype:attempted-recon; sid:200008466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"requestinteriumtlc6f6requestin.godaddysites.com",nocase; classtype:attempted-recon; sid:200008467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"requestinteriumtlc6rf6requesti.godaddysites.com",nocase; classtype:attempted-recon; sid:200008468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"requestinteriumtlc6z6requestin.godaddysites.com",nocase; classtype:attempted-recon; sid:200008469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"requestinteriumtlc6z6requestin6.godaddysites.com",nocase; classtype:attempted-recon; sid:200008470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"requestinteriumtlc6z6requestin9.godaddysites.com",nocase; classtype:attempted-recon; sid:200008471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"res-va.web.app",nocase; classtype:attempted-recon; sid:200008472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resdintreu.godaddysites.com",nocase; classtype:attempted-recon; sid:200008473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resimyukle.net",nocase; classtype:attempted-recon; sid:200008474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"resolvendo-registro-solucoes.com",nocase; classtype:attempted-recon; sid:200008475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"respondlogin.com",nocase; classtype:attempted-recon; sid:200008476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"restassured.namenewamazoncard.link",nocase; classtype:attempted-recon; sid:200008477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"restauration-mns.webcindario.com",nocase; classtype:attempted-recon; sid:200008478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"restles.ndkdjndnnd.workers.dev",nocase; classtype:attempted-recon; sid:200008479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"restless-river-4112.on.fleek.co",nocase; classtype:attempted-recon; sid:200008480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"restless-scene-1769.on.fleek.co",nocase; classtype:attempted-recon; sid:200008481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"retiro.cl",nocase; classtype:attempted-recon; sid:200008482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rev.sfr.net.gghost.ru",nocase; classtype:attempted-recon; sid:200008483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"revboosters.com",nocase; classtype:attempted-recon; sid:200008484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"review-account082.duckdns.org",nocase; classtype:attempted-recon; sid:200008485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"review.santander.uk.user-259335.com",nocase; classtype:attempted-recon; sid:200008486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"revokeaccess.com",nocase; classtype:attempted-recon; sid:200008487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rewardsyncdappssconnect.web.app",nocase; classtype:attempted-recon; sid:200008488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rfgegdsfghdfhfds.x10.mx",nocase; classtype:attempted-recon; sid:200008489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rfgegdsfghdfhfdssada.x10.mx",nocase; classtype:attempted-recon; sid:200008490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rfgsd.swpbeob.cn",nocase; classtype:attempted-recon; sid:200008491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rgmbdodosn.web.app",nocase; classtype:attempted-recon; sid:200008492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rgrdha.gekalar.cn",nocase; classtype:attempted-recon; sid:200008493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rh.luxvoice.online",nocase; classtype:attempted-recon; sid:200008494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rhgtfh.ralezxu.cn",nocase; classtype:attempted-recon; sid:200008495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rhineshill.com",nocase; classtype:attempted-recon; sid:200008496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rhtgws.totyduv.cn",nocase; classtype:attempted-recon; sid:200008497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ricohcounters.com.co",nocase; classtype:attempted-recon; sid:200008498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"risedefenders.io",nocase; classtype:attempted-recon; sid:200008499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"risemedicalmarijuanadisp.blogspot.com",nocase; classtype:attempted-recon; sid:200008500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"risersmn.com",nocase; classtype:attempted-recon; sid:200008501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ritaricunorca.gq",nocase; classtype:attempted-recon; sid:200008502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riveroflife.org.in",nocase; classtype:attempted-recon; sid:200008503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rkgoyaldigital.com",nocase; classtype:attempted-recon; sid:200008504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ro0vc.app.link",nocase; classtype:attempted-recon; sid:200008505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roccobonheur1-my-cheetah-website-copy.cheetah.builderall.com",nocase; classtype:attempted-recon; sid:200008506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rochesterspeech.com",nocase; classtype:attempted-recon; sid:200008507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rockstheme.com",nocase; classtype:attempted-recon; sid:200008508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rodriguezadams.com",nocase; classtype:attempted-recon; sid:200008509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roisnoob.github.io",nocase; classtype:attempted-recon; sid:200008510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rokoikalaw.com.tenlavi.com",nocase; classtype:attempted-recon; sid:200008511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rollsingh.in",nocase; classtype:attempted-recon; sid:200008512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rolyestemoniojanuary30.wpdevapp.tekk3.com",nocase; classtype:attempted-recon; sid:200008513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"romxn96.de",nocase; classtype:attempted-recon; sid:200008514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ronin-wallet.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ronin-wallet.web.app",nocase; classtype:attempted-recon; sid:200008516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roninwallet-official.com",nocase; classtype:attempted-recon; sid:200008517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roninwallet-ph.com",nocase; classtype:attempted-recon; sid:200008518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roninwallet.cm",nocase; classtype:attempted-recon; sid:200008519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"room-additions.com",nocase; classtype:attempted-recon; sid:200008520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roongsin.com",nocase; classtype:attempted-recon; sid:200008521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rosshw.com",nocase; classtype:attempted-recon; sid:200008522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-5ae8a.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-5ae8a.web.app",nocase; classtype:attempted-recon; sid:200008524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-cpanel-wren.surge.sh",nocase; classtype:attempted-recon; sid:200008525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-info.muslumanim.net",nocase; classtype:attempted-recon; sid:200008526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-updatealx.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"roundcube-updatealx.web.app",nocase; classtype:attempted-recon; sid:200008528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"royal-mode-1212.on.fleek.co",nocase; classtype:attempted-recon; sid:200008529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"royal9990.com",nocase; classtype:attempted-recon; sid:200008530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"royalsportshorse.com",nocase; classtype:attempted-recon; sid:200008531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rozcat.com",nocase; classtype:attempted-recon; sid:200008532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rozhanoo.ir",nocase; classtype:attempted-recon; sid:200008533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rphillipscpa.com",nocase; classtype:attempted-recon; sid:200008534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rrdf.xpmflxq.cn",nocase; classtype:attempted-recon; sid:200008535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rriwy8.webwave.dev",nocase; classtype:attempted-recon; sid:200008536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rryf.jgtidkq.cn",nocase; classtype:attempted-recon; sid:200008537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rsmpoly.org",nocase; classtype:attempted-recon; sid:200008538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rtat.gq",nocase; classtype:attempted-recon; sid:200008539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rtdtmtrxet.weebly.com",nocase; classtype:attempted-recon; sid:200008540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rtgtujfds.vizqidm.cn",nocase; classtype:attempted-recon; sid:200008541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rufalcamat.gq",nocase; classtype:attempted-recon; sid:200008542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ruloxx.com",nocase; classtype:attempted-recon; sid:200008543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ruralshop.com",nocase; classtype:attempted-recon; sid:200008544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rust-open.ru",nocase; classtype:attempted-recon; sid:200008545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rust7.com",nocase; classtype:attempted-recon; sid:200008546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rususia.weebly.com",nocase; classtype:attempted-recon; sid:200008547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ruuel-bbeure-09.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ryageekbban.tk",nocase; classtype:attempted-recon; sid:200008549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ryggd.pmllypk.cn",nocase; classtype:attempted-recon; sid:200008550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ryhhyhk.reijxay.cn",nocase; classtype:attempted-recon; sid:200008551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rywoivjba5675ag.shop",nocase; classtype:attempted-recon; sid:200008552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s-fa31f3-i.sgizmo.com",nocase; classtype:attempted-recon; sid:200008553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.free.fr",nocase; classtype:attempted-recon; sid:200008554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.yam.com",nocase; classtype:attempted-recon; sid:200008555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s104318.gridserver.com",nocase; classtype:attempted-recon; sid:200008556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s117.panelboxmanager.com",nocase; classtype:attempted-recon; sid:200008557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s23.proserv.ge",nocase; classtype:attempted-recon; sid:200008558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sa.www4.irs.gov.zmyqr.com",nocase; classtype:attempted-recon; sid:200008559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sa39394-339.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sadervoyages.intnet.mu",nocase; classtype:attempted-recon; sid:200008561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safarione.ihostfull.com",nocase; classtype:attempted-recon; sid:200008562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safdhrtnfkrk.godaddysites.com",nocase; classtype:attempted-recon; sid:200008563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safety-completed.com",nocase; classtype:attempted-recon; sid:200008564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safeuphol.dominiotemporario.com",nocase; classtype:attempted-recon; sid:200008565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safraempresas.com.br.mcas-df.ms",nocase; classtype:attempted-recon; sid:200008566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"safty.summarycheck.workers.dev",nocase; classtype:attempted-recon; sid:200008567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sahleymadison.com",nocase; classtype:attempted-recon; sid:200008568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saika69sex.monster",nocase; classtype:attempted-recon; sid:200008569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saintbarkleyshoes.com",nocase; classtype:attempted-recon; sid:200008570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saitadobrasil.com.br",nocase; classtype:attempted-recon; sid:200008571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"salamalands.com",nocase; classtype:attempted-recon; sid:200008572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saliksnas.lojaintegrada.com.br",nocase; classtype:attempted-recon; sid:200008573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"salmanfarsi01.github.io",nocase; classtype:attempted-recon; sid:200008574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samarahonda.com",nocase; classtype:attempted-recon; sid:200008575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samehonde.mncdn.com",nocase; classtype:attempted-recon; sid:200008576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sample3.thecedarcentre.org",nocase; classtype:attempted-recon; sid:200008577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samvision.com.tr",nocase; classtype:attempted-recon; sid:200008578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samvoktor.com",nocase; classtype:attempted-recon; sid:200008579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"san-dbox-home-lojaprincipessa.blogspot.com",nocase; classtype:attempted-recon; sid:200008580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanasunty.site",nocase; classtype:attempted-recon; sid:200008581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanatanastrology.com",nocase; classtype:attempted-recon; sid:200008582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandbox.the-cave.co.uk",nocase; classtype:attempted-recon; sid:200008583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandeeppk03.github.io",nocase; classtype:attempted-recon; sid:200008584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandracoconstructing.weebly.com",nocase; classtype:attempted-recon; sid:200008585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandyclouds.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanfranciscoairportlimo.net",nocase; classtype:attempted-recon; sid:200008587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanfransentinel.com",nocase; classtype:attempted-recon; sid:200008588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sanjilkumar.com",nocase; classtype:attempted-recon; sid:200008589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sankyo-m.jp",nocase; classtype:attempted-recon; sid:200008590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"santander-securedevice.com",nocase; classtype:attempted-recon; sid:200008591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"santander.auth-id-43.com",nocase; classtype:attempted-recon; sid:200008592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"santander.auth-user-13.com",nocase; classtype:attempted-recon; sid:200008593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"santander.personal-appid.com",nocase; classtype:attempted-recon; sid:200008594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sants.id-31.com",nocase; classtype:attempted-recon; sid:200008595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"saritapariyar.com.np",nocase; classtype:attempted-recon; sid:200008596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sarsrupfa.tk",nocase; classtype:attempted-recon; sid:200008597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"satay-secur.reconfimations.pagedisabled.workers.dev",nocase; classtype:attempted-recon; sid:200008598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"satgobmx.com",nocase; classtype:attempted-recon; sid:200008599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"savingsfordentalcare.com",nocase; classtype:attempted-recon; sid:200008600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sbs-siebanlagen.de",nocase; classtype:attempted-recon; sid:200008601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sc-01111000.ihostfull.com",nocase; classtype:attempted-recon; sid:200008602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scbbank-thamchieu-mtcn.weebly.com",nocase; classtype:attempted-recon; sid:200008603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"schmittner.us",nocase; classtype:attempted-recon; sid:200008604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"school.greenislandtrust.org",nocase; classtype:attempted-recon; sid:200008605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sciertsaccountsforvilotiaons.co.vu",nocase; classtype:attempted-recon; sid:200008606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scl-leagua.ru",nocase; classtype:attempted-recon; sid:200008607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sco1992999.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200008608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scrocketry.com",nocase; classtype:attempted-recon; sid:200008609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scrty.cold-thunder-d531.siteacn.workers.dev",nocase; classtype:attempted-recon; sid:200008610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"scvcb.svctqjq.cn",nocase; classtype:attempted-recon; sid:200008611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdf.pages.dev",nocase; classtype:attempted-recon; sid:200008612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdffsf.hyperphp.com",nocase; classtype:attempted-recon; sid:200008613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdgh765.hostfree.pw",nocase; classtype:attempted-recon; sid:200008614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdgvsdvsdvs.blogspot.com",nocase; classtype:attempted-recon; sid:200008615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdh-sy.com",nocase; classtype:attempted-recon; sid:200008616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdsvkdsjvdjlvnldsnlcsnksalkasz.weebly.com",nocase; classtype:attempted-recon; sid:200008617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdvfh.rlejkfh.cn",nocase; classtype:attempted-recon; sid:200008618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"se-connecter-au-webmail-la-poste1.yolasite.com",nocase; classtype:attempted-recon; sid:200008619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"se-connecter-au-webmail-lapostenet.yolasite.com",nocase; classtype:attempted-recon; sid:200008620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"se5dcrtfghbj.weebly.com",nocase; classtype:attempted-recon; sid:200008621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seafooddeliveryapp.com",nocase; classtype:attempted-recon; sid:200008622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.00147.cn",nocase; classtype:attempted-recon; sid:200008623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.1105sss.xyz",nocase; classtype:attempted-recon; sid:200008624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.1v12v2.xyz",nocase; classtype:attempted-recon; sid:200008625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.4-4-j-diu20.xyz",nocase; classtype:attempted-recon; sid:200008626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.4-4-j-hnh19.xyz",nocase; classtype:attempted-recon; sid:200008627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.4-4-j-lop9.xyz",nocase; classtype:attempted-recon; sid:200008628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.4-4-j-omg16.xyz",nocase; classtype:attempted-recon; sid:200008629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.4-4-j-qpo2.xyz",nocase; classtype:attempted-recon; sid:200008630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.4-4-j-tyw10.xyz",nocase; classtype:attempted-recon; sid:200008631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.4-4-j-wbn12.xyz",nocase; classtype:attempted-recon; sid:200008632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.4-4-j-xcs4.xyz",nocase; classtype:attempted-recon; sid:200008633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.4-4-j-zzd17.xyz",nocase; classtype:attempted-recon; sid:200008634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.5634633.xyz",nocase; classtype:attempted-recon; sid:200008635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.76-u-gbf8.xyz",nocase; classtype:attempted-recon; sid:200008636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.76-u-rtmj.xyz",nocase; classtype:attempted-recon; sid:200008637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.76-u-rvc3.xyz",nocase; classtype:attempted-recon; sid:200008638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.76-u-tyw20.xyz",nocase; classtype:attempted-recon; sid:200008639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.76-u-vve13.xyz",nocase; classtype:attempted-recon; sid:200008640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.76-u-wbn2.xyz",nocase; classtype:attempted-recon; sid:200008641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.76-u-wsd10.xyz",nocase; classtype:attempted-recon; sid:200008642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.76-u-xds5.xyz",nocase; classtype:attempted-recon; sid:200008643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.76-u-zxcv.xyz",nocase; classtype:attempted-recon; sid:200008644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.76-u-zzd12.xyz",nocase; classtype:attempted-recon; sid:200008645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.anoni.shop",nocase; classtype:attempted-recon; sid:200008646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.cawut.top",nocase; classtype:attempted-recon; sid:200008647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.cctzt.top",nocase; classtype:attempted-recon; sid:200008648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.cdfsiejkf.icu",nocase; classtype:attempted-recon; sid:200008649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.cinoe.top",nocase; classtype:attempted-recon; sid:200008650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.cvxot.top",nocase; classtype:attempted-recon; sid:200008651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.earla.shop",nocase; classtype:attempted-recon; sid:200008652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.eoewz.top",nocase; classtype:attempted-recon; sid:200008653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.evrrm.top",nocase; classtype:attempted-recon; sid:200008654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.ezmzo.top",nocase; classtype:attempted-recon; sid:200008655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.fzapp.icu",nocase; classtype:attempted-recon; sid:200008656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.heterm.shop",nocase; classtype:attempted-recon; sid:200008657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.irand.shop",nocase; classtype:attempted-recon; sid:200008658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.iuzat.top",nocase; classtype:attempted-recon; sid:200008659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.ixras.top",nocase; classtype:attempted-recon; sid:200008660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.izcti.top",nocase; classtype:attempted-recon; sid:200008661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.jiaoyimao609.xyz",nocase; classtype:attempted-recon; sid:200008662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.junzi123.xyz",nocase; classtype:attempted-recon; sid:200008663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.kmfmuq.shop",nocase; classtype:attempted-recon; sid:200008664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.llsy456.xyz",nocase; classtype:attempted-recon; sid:200008665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.logous.shop",nocase; classtype:attempted-recon; sid:200008666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.marsaw.shop",nocase; classtype:attempted-recon; sid:200008667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.melobo.shop",nocase; classtype:attempted-recon; sid:200008668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.mturv.top",nocase; classtype:attempted-recon; sid:200008669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.mumban.shop",nocase; classtype:attempted-recon; sid:200008670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.nrxco.top",nocase; classtype:attempted-recon; sid:200008671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.osamar.shop",nocase; classtype:attempted-recon; sid:200008672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.oueoa.top",nocase; classtype:attempted-recon; sid:200008673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.ozeez.top",nocase; classtype:attempted-recon; sid:200008674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.polyes.shop",nocase; classtype:attempted-recon; sid:200008675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.posium.shop",nocase; classtype:attempted-recon; sid:200008676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.reliev.shop",nocase; classtype:attempted-recon; sid:200008677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.rnonv.top",nocase; classtype:attempted-recon; sid:200008678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.ronzm.top",nocase; classtype:attempted-recon; sid:200008679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.siw123.xyz",nocase; classtype:attempted-recon; sid:200008680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.siw234.xyz",nocase; classtype:attempted-recon; sid:200008681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.tenxo.top",nocase; classtype:attempted-recon; sid:200008682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.tzsnz.top",nocase; classtype:attempted-recon; sid:200008683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.urria.top",nocase; classtype:attempted-recon; sid:200008684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.uukf76.xyz",nocase; classtype:attempted-recon; sid:200008685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.vaswa.top",nocase; classtype:attempted-recon; sid:200008686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.viitt.top",nocase; classtype:attempted-recon; sid:200008687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.villau.shop",nocase; classtype:attempted-recon; sid:200008688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.vipjym1.xyz",nocase; classtype:attempted-recon; sid:200008689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.vxaet.top",nocase; classtype:attempted-recon; sid:200008690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.vzrav.top",nocase; classtype:attempted-recon; sid:200008691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.wwcim.top",nocase; classtype:attempted-recon; sid:200008692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.wzzws.top",nocase; classtype:attempted-recon; sid:200008693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.xnxrr.top",nocase; classtype:attempted-recon; sid:200008694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.xsczs.top",nocase; classtype:attempted-recon; sid:200008695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.xxavn.top",nocase; classtype:attempted-recon; sid:200008696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.zanms.top",nocase; classtype:attempted-recon; sid:200008697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.zbj0.shop",nocase; classtype:attempted-recon; sid:200008698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.zewss.top",nocase; classtype:attempted-recon; sid:200008699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.zhutai123.xyz",nocase; classtype:attempted-recon; sid:200008700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.zznwe.top",nocase; classtype:attempted-recon; sid:200008701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seankoy.host",nocase; classtype:attempted-recon; sid:200008702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"searchnama.com",nocase; classtype:attempted-recon; sid:200008703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sebat-dhl.blogspot.com",nocase; classtype:attempted-recon; sid:200008704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sebene27.github.io",nocase; classtype:attempted-recon; sid:200008705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sec-acct.web.app",nocase; classtype:attempted-recon; sid:200008706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secrcitizensbank.serveirc.com",nocase; classtype:attempted-recon; sid:200008707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-alerts.ddns.mobi",nocase; classtype:attempted-recon; sid:200008708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-alpha-497da0be515757web.gidiagents.com",nocase; classtype:attempted-recon; sid:200008709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-chaseauthenticationsapps.propertylaser.com",nocase; classtype:attempted-recon; sid:200008710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure-runescape.xgm.rnp.mybluehost.me",nocase; classtype:attempted-recon; sid:200008711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.mihirandjing.workers.dev",nocase; classtype:attempted-recon; sid:200008712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.oldschool.com-ll.cz",nocase; classtype:attempted-recon; sid:200008713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.oldschool.com-n.cz",nocase; classtype:attempted-recon; sid:200008714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.oldschool.com-rs.cz",nocase; classtype:attempted-recon; sid:200008715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.oldschool.com-v.cz",nocase; classtype:attempted-recon; sid:200008716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.oldschoolrs.com-as.cz",nocase; classtype:attempted-recon; sid:200008717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.online-verify-au.com",nocase; classtype:attempted-recon; sid:200008718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescape.com-as.cz",nocase; classtype:attempted-recon; sid:200008719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.runescope.com-as.cz",nocase; classtype:attempted-recon; sid:200008720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.staman.direct.quickconnect.to",nocase; classtype:attempted-recon; sid:200008721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure.transaction.openseal.market",nocase; classtype:attempted-recon; sid:200008722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure06asecurejp.com",nocase; classtype:attempted-recon; sid:200008723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secure55.webhostinghub.com",nocase; classtype:attempted-recon; sid:200008724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securec7sa.net",nocase; classtype:attempted-recon; sid:200008725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securecitizensbank.servehttp.com",nocase; classtype:attempted-recon; sid:200008726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securecuserver.co.uk",nocase; classtype:attempted-recon; sid:200008727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secured-app-i5m69.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200008728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"secured-verification-live-07.marketingparedes.com",nocase; classtype:attempted-recon; sid:200008729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securedadobeserve.pages.dev",nocase; classtype:attempted-recon; sid:200008730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securedisneyplus.com",nocase; classtype:attempted-recon; sid:200008731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securedwalletverificationauth.videohdvenezuela.com.ve",nocase; classtype:attempted-recon; sid:200008732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securedwells27271.net",nocase; classtype:attempted-recon; sid:200008733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securegateway-ovhcloud.csl-sl.de",nocase; classtype:attempted-recon; sid:200008734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securejp08f.com",nocase; classtype:attempted-recon; sid:200008735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securejpinc8b.com",nocase; classtype:attempted-recon; sid:200008736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securesbillsreadyjune.weebly.com",nocase; classtype:attempted-recon; sid:200008737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securesmybillspoweredby.weebly.com",nocase; classtype:attempted-recon; sid:200008738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securesrvattt.ga",nocase; classtype:attempted-recon; sid:200008739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-metamask.com",nocase; classtype:attempted-recon; sid:200008740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-page-community-standards.blogspot.com",nocase; classtype:attempted-recon; sid:200008741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"security-review-logons.com",nocase; classtype:attempted-recon; sid:200008742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securityexit.260mb.net",nocase; classtype:attempted-recon; sid:200008743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"securitynows.com",nocase; classtype:attempted-recon; sid:200008744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seebonerp.com",nocase; classtype:attempted-recon; sid:200008745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seehere.trainercentral.com",nocase; classtype:attempted-recon; sid:200008746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguridadsantander.net",nocase; classtype:attempted-recon; sid:200008747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguroitservices.com",nocase; classtype:attempted-recon; sid:200008748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seguronacionalcr.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200008749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"select-a-cleaner.com",nocase; classtype:attempted-recon; sid:200008750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"selector26.gg",nocase; classtype:attempted-recon; sid:200008751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"selector28.gg",nocase; classtype:attempted-recon; sid:200008752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sellawebap-com.preview-domain.com",nocase; classtype:attempted-recon; sid:200008753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sen-manole.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seoservicesiox.web.app",nocase; classtype:attempted-recon; sid:200008755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seosona.com",nocase; classtype:attempted-recon; sid:200008756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seotop.vn",nocase; classtype:attempted-recon; sid:200008757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seri-lapot-mail.yolasite.com",nocase; classtype:attempted-recon; sid:200008758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sertyxese.myfreesites.net",nocase; classtype:attempted-recon; sid:200008759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serv0spk.de",nocase; classtype:attempted-recon; sid:200008760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servcers-dibaservices.cyou",nocase; classtype:attempted-recon; sid:200008761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"server-networksolutions.web.app",nocase; classtype:attempted-recon; sid:200008762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serverdapp.netlify.app",nocase; classtype:attempted-recon; sid:200008763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servertechnicalnoticeimmestae-reconecting.pages.dev",nocase; classtype:attempted-recon; sid:200008764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servic-4096.awuqohsjo9847.workers.dev",nocase; classtype:attempted-recon; sid:200008765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"service-lapostenet.yolasite.com",nocase; classtype:attempted-recon; sid:200008766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"service-lkdn2020.gacconstrutora.com.br",nocase; classtype:attempted-recon; sid:200008767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"service.zeeshangroup.com",nocase; classtype:attempted-recon; sid:200008768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicepage.service-page.workers.dev",nocase; classtype:attempted-recon; sid:200008769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicepublique-ameli.com",nocase; classtype:attempted-recon; sid:200008770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"services.oldschool.com-as.cz",nocase; classtype:attempted-recon; sid:200008771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicesbancaire.com",nocase; classtype:attempted-recon; sid:200008772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicesmailcontroles.000webhostapp.com",nocase; classtype:attempted-recon; sid:200008773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicessurdemande.ca",nocase; classtype:attempted-recon; sid:200008774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicevv.weebly.com",nocase; classtype:attempted-recon; sid:200008775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicio-1-b374cf.ingress-erytho.ewp.live",nocase; classtype:attempted-recon; sid:200008776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servicioscentauro.com.co",nocase; classtype:attempted-recon; sid:200008777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servics.validationsecuradm.workers.dev",nocase; classtype:attempted-recon; sid:200008778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"servisaludec.com",nocase; classtype:attempted-recon; sid:200008779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"serviziompsienastorno.com",nocase; classtype:attempted-recon; sid:200008780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sespgespotersupp.tk",nocase; classtype:attempted-recon; sid:200008781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"setagaya-hkm.com",nocase; classtype:attempted-recon; sid:200008782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"setting-potential-sin-mice.trycloudflare.com",nocase; classtype:attempted-recon; sid:200008783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"setupmynorton.square.site",nocase; classtype:attempted-recon; sid:200008784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seul.unilurio.ac.mz",nocase; classtype:attempted-recon; sid:200008785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seulugaemais.online",nocase; classtype:attempted-recon; sid:200008786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfc.com.vn",nocase; classtype:attempted-recon; sid:200008787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfdfg.ikhkroy.cn",nocase; classtype:attempted-recon; sid:200008788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfdg.xhulgcd.cn",nocase; classtype:attempted-recon; sid:200008789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfr-mesfactures.app",nocase; classtype:attempted-recon; sid:200008790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfr-moncompte.servehttp.com",nocase; classtype:attempted-recon; sid:200008791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfrfy.octsuee.cn",nocase; classtype:attempted-recon; sid:200008792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfrpanel.lws.fr",nocase; classtype:attempted-recon; sid:200008793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfxsdf.hyperphp.com",nocase; classtype:attempted-recon; sid:200008794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgtbalde991-dot-still-dynamics-321006.ue.r.appspot.com",nocase; classtype:attempted-recon; sid:200008795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sh3612211.c.had.su",nocase; classtype:attempted-recon; sid:200008796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shamasic.web.app",nocase; classtype:attempted-recon; sid:200008797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shanky0.github.io",nocase; classtype:attempted-recon; sid:200008798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-1657f.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-eu1.hsforms.com",nocase; classtype:attempted-recon; sid:200008800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-doc-review-folder.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-doc-review-folder.web.app",nocase; classtype:attempted-recon; sid:200008802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-folder-crisk-coa.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-folder-crisk-coa.web.app",nocase; classtype:attempted-recon; sid:200008804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-folder-kopp-lip.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-folder-kopp-lip.web.app",nocase; classtype:attempted-recon; sid:200008806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-folder-laz-coa.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-folder-laz-coa.web.app",nocase; classtype:attempted-recon; sid:200008808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-folder-sliz-coa.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-folder-sliz-coa.web.app",nocase; classtype:attempted-recon; sid:200008810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-login-pdf.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-login-pdf.web.app",nocase; classtype:attempted-recon; sid:200008812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share-file-review-doc-file-folder.web.app",nocase; classtype:attempted-recon; sid:200008813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.ebforms.com",nocase; classtype:attempted-recon; sid:200008814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharecorepen.reibombas.com.br",nocase; classtype:attempted-recon; sid:200008815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-email-files.documents-project.workers.dev",nocase; classtype:attempted-recon; sid:200008816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-private.files-auuth.workers.dev",nocase; classtype:attempted-recon; sid:200008817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-private.voicee-security.workers.dev",nocase; classtype:attempted-recon; sid:200008818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared.0294823229453195849205827592018491.workers.dev",nocase; classtype:attempted-recon; sid:200008819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared.privatte-document.workers.dev",nocase; classtype:attempted-recon; sid:200008820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharedfax815201376.wordpress.com",nocase; classtype:attempted-recon; sid:200008821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharedonline.myportfolio.com",nocase; classtype:attempted-recon; sid:200008822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepoint.sharedfileonline.com",nocase; classtype:attempted-recon; sid:200008823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepointdocsecure.myportfolio.com",nocase; classtype:attempted-recon; sid:200008824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharepointmicrosoftonline0356.weebly.com",nocase; classtype:attempted-recon; sid:200008825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharere-6345879tfdytugiocyfuigyughj.s3.eu-north-1.amazonaws.com",nocase; classtype:attempted-recon; sid:200008826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shark-app-pd964.ondigitalocean.app",nocase; classtype:attempted-recon; sid:200008827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharpeoiitnttt.weebly.com",nocase; classtype:attempted-recon; sid:200008828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shatharatksa.com",nocase; classtype:attempted-recon; sid:200008829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shaza6259.github.io",nocase; classtype:attempted-recon; sid:200008830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sheet.invoice-remit-advance.workers.dev",nocase; classtype:attempted-recon; sid:200008831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shelleyjohnsam.com",nocase; classtype:attempted-recon; sid:200008832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shelllatampassargentina.net",nocase; classtype:attempted-recon; sid:200008833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shhssjs.godaddysites.com",nocase; classtype:attempted-recon; sid:200008834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shifthappenztv.com",nocase; classtype:attempted-recon; sid:200008835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shikimei.jp",nocase; classtype:attempted-recon; sid:200008836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shiny-sound-a24a.rcvrysrvce.workers.dev",nocase; classtype:attempted-recon; sid:200008837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shipment-post-at.apolline-voyance.com",nocase; classtype:attempted-recon; sid:200008838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shiptodelevery.serveuser.com",nocase; classtype:attempted-recon; sid:200008839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shop.cmfurnituremall.com",nocase; classtype:attempted-recon; sid:200008840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopeecoins.blogspot.com",nocase; classtype:attempted-recon; sid:200008841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopeeday2022.blogspot.com",nocase; classtype:attempted-recon; sid:200008842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopfrontservices.coffeecup.com",nocase; classtype:attempted-recon; sid:200008843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shoppingtrolleyhandlewrap.com",nocase; classtype:attempted-recon; sid:200008844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shopyourkind.com",nocase; classtype:attempted-recon; sid:200008845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"short.mypaste.fun",nocase; classtype:attempted-recon; sid:200008846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shorturl-ddc.moph.go.th",nocase; classtype:attempted-recon; sid:200008847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shorturl.ac",nocase; classtype:attempted-recon; sid:200008848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shorturl.vn",nocase; classtype:attempted-recon; sid:200008849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shrill.nxazenom.workers.dev",nocase; classtype:attempted-recon; sid:200008850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siapujian.salatiga.go.id",nocase; classtype:attempted-recon; sid:200008851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sicopenlinea.crcontratacionesenlinea.com",nocase; classtype:attempted-recon; sid:200008852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sicurezza-dati.com",nocase; classtype:attempted-recon; sid:200008853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sicurezza-web.scarica-adesso.com",nocase; classtype:attempted-recon; sid:200008854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sicuroarea.eu",nocase; classtype:attempted-recon; sid:200008855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-info.osteoism.clubthkorbe0openid.msjbz2315sfas.shop",nocase; classtype:attempted-recon; sid:200008856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-info.osteoism.clubthkorbe0openid.nhcjhf5334sff.shop",nocase; classtype:attempted-recon; sid:200008857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-info.osteoism.clubthkorbe0openid.pamfjd8852bnh.shop",nocase; classtype:attempted-recon; sid:200008858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-info.osteoism.clubthkorbe0openid.vdgjs6335sfs.shop",nocase; classtype:attempted-recon; sid:200008859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-info.osteoism.clubthkorbe0openid.wafjnk9853jkl.shop",nocase; classtype:attempted-recon; sid:200008860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sign-in-verification-929bb.web.app",nocase; classtype:attempted-recon; sid:200008861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"signedlines.wavoto.com",nocase; classtype:attempted-recon; sid:200008862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"signin-att-mail-id.weebly.com",nocase; classtype:attempted-recon; sid:200008863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sigulemada.web.app",nocase; classtype:attempted-recon; sid:200008864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"silent-firefly-5561.on.fleek.co",nocase; classtype:attempted-recon; sid:200008865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siliconescuritiba.com.br",nocase; classtype:attempted-recon; sid:200008866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simgeprek.blitarkota.go.id",nocase; classtype:attempted-recon; sid:200008867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simplissimot.com",nocase; classtype:attempted-recon; sid:200008868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simplybeyoutiful.org",nocase; classtype:attempted-recon; sid:200008869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simranarts.com",nocase; classtype:attempted-recon; sid:200008870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"singin-arnericanexpress-jp.workers.dev",nocase; classtype:attempted-recon; sid:200008871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"singin.vpass.co.jp.1553kxpk.top",nocase; classtype:attempted-recon; sid:200008872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"singin.vpass.co.jp.1715kxpk.top",nocase; classtype:attempted-recon; sid:200008873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"singin.vpass.co.jp.333369.xyz",nocase; classtype:attempted-recon; sid:200008874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"singin.vpass.co.jp.366388.xyz",nocase; classtype:attempted-recon; sid:200008875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"singin.vpass.co.jp.5715kxpk.top",nocase; classtype:attempted-recon; sid:200008876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"singin.vpass.co.jp.699888.xyz",nocase; classtype:attempted-recon; sid:200008877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"singin.vpass.co.jp.812666.xyz",nocase; classtype:attempted-recon; sid:200008878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siporados15585.blogspot.com",nocase; classtype:attempted-recon; sid:200008879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sistemaprobado.solicitatuprestam0.xyz",nocase; classtype:attempted-recon; sid:200008880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sistemel.com",nocase; classtype:attempted-recon; sid:200008881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site-4403463-3995-6112.mystrikingly.com",nocase; classtype:attempted-recon; sid:200008882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site.dappfixedconnect.net",nocase; classtype:attempted-recon; sid:200008883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9423623.92.webydo.com",nocase; classtype:attempted-recon; sid:200008884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9434107.92.webydo.com",nocase; classtype:attempted-recon; sid:200008885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9548676.92.webydo.com",nocase; classtype:attempted-recon; sid:200008886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9552191.92.webydo.com",nocase; classtype:attempted-recon; sid:200008887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9606042.92.webydo.com",nocase; classtype:attempted-recon; sid:200008888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9607677.92.webydo.com",nocase; classtype:attempted-recon; sid:200008889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"site9608381.92.webydo.com",nocase; classtype:attempted-recon; sid:200008890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder157154.dynadot.com",nocase; classtype:attempted-recon; sid:200008891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder157806.dynadot.com",nocase; classtype:attempted-recon; sid:200008892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158035.dynadot.com",nocase; classtype:attempted-recon; sid:200008893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158455.dynadot.com",nocase; classtype:attempted-recon; sid:200008894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158501.dynadot.com",nocase; classtype:attempted-recon; sid:200008895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158529.dynadot.com",nocase; classtype:attempted-recon; sid:200008896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158730.dynadot.com",nocase; classtype:attempted-recon; sid:200008897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158812.dynadot.com",nocase; classtype:attempted-recon; sid:200008898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158822.dynadot.com",nocase; classtype:attempted-recon; sid:200008899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158888.dynadot.com",nocase; classtype:attempted-recon; sid:200008900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158899.dynadot.com",nocase; classtype:attempted-recon; sid:200008901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158957.dynadot.com",nocase; classtype:attempted-recon; sid:200008902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158992.dynadot.com",nocase; classtype:attempted-recon; sid:200008903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder158994.dynadot.com",nocase; classtype:attempted-recon; sid:200008904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder159348.dynadot.com",nocase; classtype:attempted-recon; sid:200008905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder159370.dynadot.com",nocase; classtype:attempted-recon; sid:200008906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder159442.dynadot.com",nocase; classtype:attempted-recon; sid:200008907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder159636.dynadot.com",nocase; classtype:attempted-recon; sid:200008908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder159641.dynadot.com",nocase; classtype:attempted-recon; sid:200008909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder159651.dynadot.com",nocase; classtype:attempted-recon; sid:200008910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder159935.dynadot.com",nocase; classtype:attempted-recon; sid:200008911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder159964.dynadot.com",nocase; classtype:attempted-recon; sid:200008912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder160378.dynadot.com",nocase; classtype:attempted-recon; sid:200008913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder160409.dynadot.com",nocase; classtype:attempted-recon; sid:200008914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder160428.dynadot.com",nocase; classtype:attempted-recon; sid:200008915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder160510.dynadot.com",nocase; classtype:attempted-recon; sid:200008916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder160717.dynadot.com",nocase; classtype:attempted-recon; sid:200008917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder162026.dynadot.com",nocase; classtype:attempted-recon; sid:200008918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder162459.dynadot.com",nocase; classtype:attempted-recon; sid:200008919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder162545.dynadot.com",nocase; classtype:attempted-recon; sid:200008920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder162609.dynadot.com",nocase; classtype:attempted-recon; sid:200008921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder162626.dynadot.com",nocase; classtype:attempted-recon; sid:200008922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder162683.dynadot.com",nocase; classtype:attempted-recon; sid:200008923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder162761.dynadot.com",nocase; classtype:attempted-recon; sid:200008924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder162851.dynadot.com",nocase; classtype:attempted-recon; sid:200008925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder163358.dynadot.com",nocase; classtype:attempted-recon; sid:200008926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder163627.dynadot.com",nocase; classtype:attempted-recon; sid:200008927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder163650.dynadot.com",nocase; classtype:attempted-recon; sid:200008928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder163947.dynadot.com",nocase; classtype:attempted-recon; sid:200008929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder164078.dynadot.com",nocase; classtype:attempted-recon; sid:200008930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder164239.dynadot.com",nocase; classtype:attempted-recon; sid:200008931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder165613.dynadot.com",nocase; classtype:attempted-recon; sid:200008932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder166620.dynadot.com",nocase; classtype:attempted-recon; sid:200008933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder166797.dynadot.com",nocase; classtype:attempted-recon; sid:200008934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder166858.dynadot.com",nocase; classtype:attempted-recon; sid:200008935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder167346.dynadot.com",nocase; classtype:attempted-recon; sid:200008936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder167390.dynadot.com",nocase; classtype:attempted-recon; sid:200008937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder167444.dynadot.com",nocase; classtype:attempted-recon; sid:200008938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder167498.dynadot.com",nocase; classtype:attempted-recon; sid:200008939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder167660.dynadot.com",nocase; classtype:attempted-recon; sid:200008940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder167989.dynadot.com",nocase; classtype:attempted-recon; sid:200008941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder167990.dynadot.com",nocase; classtype:attempted-recon; sid:200008942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder168007.dynadot.com",nocase; classtype:attempted-recon; sid:200008943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder168011.dynadot.com",nocase; classtype:attempted-recon; sid:200008944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder168199.dynadot.com",nocase; classtype:attempted-recon; sid:200008945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sitebuilder168613.dynadot.com",nocase; classtype:attempted-recon; sid:200008946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"situs-pemulihan-resmi0.webnode.com",nocase; classtype:attempted-recon; sid:200008947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siyunjiaoyu.com",nocase; classtype:attempted-recon; sid:200008948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ske0703.skypixel.com.mx",nocase; classtype:attempted-recon; sid:200008949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skin-swap.com",nocase; classtype:attempted-recon; sid:200008950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skinbid.org.es",nocase; classtype:attempted-recon; sid:200008951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skinhouse.id",nocase; classtype:attempted-recon; sid:200008952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skiqthegames.com",nocase; classtype:attempted-recon; sid:200008953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sklepkody.pl",nocase; classtype:attempted-recon; sid:200008954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sky-authenticate.firebaseapp.com",nocase; classtype:attempted-recon; sid:200008955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sky-authenticate.web.app",nocase; classtype:attempted-recon; sid:200008956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"skyblueenterprises.co",nocase; classtype:attempted-recon; sid:200008957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sl18839399.liveblog365.com",nocase; classtype:attempted-recon; sid:200008958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sleepmaskz.com",nocase; classtype:attempted-recon; sid:200008959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"slmkufeckf.jon-jensen.workers.dev",nocase; classtype:attempted-recon; sid:200008960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"slowlinebag.jp",nocase; classtype:attempted-recon; sid:200008961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sm777.csb.app",nocase; classtype:attempted-recon; sid:200008962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smal.lu",nocase; classtype:attempted-recon; sid:200008963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"small-dust-6c63.pontufbksd.workers.dev",nocase; classtype:attempted-recon; sid:200008964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smart.webioapps.com",nocase; classtype:attempted-recon; sid:200008965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartcontractexecutor.com",nocase; classtype:attempted-recon; sid:200008966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smartmom.com.bd",nocase; classtype:attempted-recon; sid:200008967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smbc.b-as-yr.top",nocase; classtype:attempted-recon; sid:200008968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smbc.m-sb-q.top",nocase; classtype:attempted-recon; sid:200008969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.00147.cn",nocase; classtype:attempted-recon; sid:200008970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.1105sss.xyz",nocase; classtype:attempted-recon; sid:200008971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.1v12v2.xyz",nocase; classtype:attempted-recon; sid:200008972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.4-4-j-diu20.xyz",nocase; classtype:attempted-recon; sid:200008973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.4-4-j-hnh19.xyz",nocase; classtype:attempted-recon; sid:200008974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.4-4-j-lop9.xyz",nocase; classtype:attempted-recon; sid:200008975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.4-4-j-omg16.xyz",nocase; classtype:attempted-recon; sid:200008976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.4-4-j-qpo2.xyz",nocase; classtype:attempted-recon; sid:200008977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.4-4-j-tyw10.xyz",nocase; classtype:attempted-recon; sid:200008978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.4-4-j-wbn12.xyz",nocase; classtype:attempted-recon; sid:200008979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.4-4-j-xcs4.xyz",nocase; classtype:attempted-recon; sid:200008980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.4-4-j-zzd17.xyz",nocase; classtype:attempted-recon; sid:200008981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.5634633.xyz",nocase; classtype:attempted-recon; sid:200008982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.76-u-gbf8.xyz",nocase; classtype:attempted-recon; sid:200008983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.76-u-rtmj.xyz",nocase; classtype:attempted-recon; sid:200008984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.76-u-rvc3.xyz",nocase; classtype:attempted-recon; sid:200008985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.76-u-tyw20.xyz",nocase; classtype:attempted-recon; sid:200008986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.76-u-vve13.xyz",nocase; classtype:attempted-recon; sid:200008987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.76-u-wbn2.xyz",nocase; classtype:attempted-recon; sid:200008988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.76-u-wsd10.xyz",nocase; classtype:attempted-recon; sid:200008989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.76-u-xds5.xyz",nocase; classtype:attempted-recon; sid:200008990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.76-u-zxcv.xyz",nocase; classtype:attempted-recon; sid:200008991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.76-u-zzd12.xyz",nocase; classtype:attempted-recon; sid:200008992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.anoni.shop",nocase; classtype:attempted-recon; sid:200008993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.cawut.top",nocase; classtype:attempted-recon; sid:200008994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.cctzt.top",nocase; classtype:attempted-recon; sid:200008995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.cdfsiejkf.icu",nocase; classtype:attempted-recon; sid:200008996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.cinoe.top",nocase; classtype:attempted-recon; sid:200008997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.cvxot.top",nocase; classtype:attempted-recon; sid:200008998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.earla.shop",nocase; classtype:attempted-recon; sid:200008999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.eoewz.top",nocase; classtype:attempted-recon; sid:200009000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.evrrm.top",nocase; classtype:attempted-recon; sid:200009001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.ezmzo.top",nocase; classtype:attempted-recon; sid:200009002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.fzapp.icu",nocase; classtype:attempted-recon; sid:200009003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.heterm.shop",nocase; classtype:attempted-recon; sid:200009004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.irand.shop",nocase; classtype:attempted-recon; sid:200009005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.iuzat.top",nocase; classtype:attempted-recon; sid:200009006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.ixras.top",nocase; classtype:attempted-recon; sid:200009007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.izcti.top",nocase; classtype:attempted-recon; sid:200009008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.jiaoyimao609.xyz",nocase; classtype:attempted-recon; sid:200009009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.junzi123.xyz",nocase; classtype:attempted-recon; sid:200009010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.kmfmuq.shop",nocase; classtype:attempted-recon; sid:200009011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.llsy456.xyz",nocase; classtype:attempted-recon; sid:200009012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.logous.shop",nocase; classtype:attempted-recon; sid:200009013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.marsaw.shop",nocase; classtype:attempted-recon; sid:200009014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.melobo.shop",nocase; classtype:attempted-recon; sid:200009015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.mturv.top",nocase; classtype:attempted-recon; sid:200009016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.mumban.shop",nocase; classtype:attempted-recon; sid:200009017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.nrxco.top",nocase; classtype:attempted-recon; sid:200009018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.osamar.shop",nocase; classtype:attempted-recon; sid:200009019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.oueoa.top",nocase; classtype:attempted-recon; sid:200009020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.ozeez.top",nocase; classtype:attempted-recon; sid:200009021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.polyes.shop",nocase; classtype:attempted-recon; sid:200009022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.posium.shop",nocase; classtype:attempted-recon; sid:200009023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.reliev.shop",nocase; classtype:attempted-recon; sid:200009024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.rnonv.top",nocase; classtype:attempted-recon; sid:200009025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.ronzm.top",nocase; classtype:attempted-recon; sid:200009026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.siw123.xyz",nocase; classtype:attempted-recon; sid:200009027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.siw234.xyz",nocase; classtype:attempted-recon; sid:200009028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.tenxo.top",nocase; classtype:attempted-recon; sid:200009029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.tzsnz.top",nocase; classtype:attempted-recon; sid:200009030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.urria.top",nocase; classtype:attempted-recon; sid:200009031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.uukf76.xyz",nocase; classtype:attempted-recon; sid:200009032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.vaswa.top",nocase; classtype:attempted-recon; sid:200009033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.viitt.top",nocase; classtype:attempted-recon; sid:200009034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.villau.shop",nocase; classtype:attempted-recon; sid:200009035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.vipjym1.xyz",nocase; classtype:attempted-recon; sid:200009036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.vxaet.top",nocase; classtype:attempted-recon; sid:200009037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.vzrav.top",nocase; classtype:attempted-recon; sid:200009038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.wwcim.top",nocase; classtype:attempted-recon; sid:200009039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.wzzws.top",nocase; classtype:attempted-recon; sid:200009040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.xnxrr.top",nocase; classtype:attempted-recon; sid:200009041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.xsczs.top",nocase; classtype:attempted-recon; sid:200009042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.xxavn.top",nocase; classtype:attempted-recon; sid:200009043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.zanms.top",nocase; classtype:attempted-recon; sid:200009044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.zbj0.shop",nocase; classtype:attempted-recon; sid:200009045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.zewss.top",nocase; classtype:attempted-recon; sid:200009046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.zhutai123.xyz",nocase; classtype:attempted-recon; sid:200009047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.zznwe.top",nocase; classtype:attempted-recon; sid:200009048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smeo.org.mx",nocase; classtype:attempted-recon; sid:200009049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smgolamalif.github.io",nocase; classtype:attempted-recon; sid:200009050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smi.onlygfpics.com",nocase; classtype:attempted-recon; sid:200009051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smileatelier.com",nocase; classtype:attempted-recon; sid:200009052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smithchamness.com",nocase; classtype:attempted-recon; sid:200009053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smkkesehatanjember.sch.id",nocase; classtype:attempted-recon; sid:200009054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sml1s.hyperphp.com",nocase; classtype:attempted-recon; sid:200009055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smpn4lumajang.sch.id",nocase; classtype:attempted-recon; sid:200009056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsenligne.myfreesites.net",nocase; classtype:attempted-recon; sid:200009057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsmms.flazio.com",nocase; classtype:attempted-recon; sid:200009058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsorangephonemail.myfreesites.net",nocase; classtype:attempted-recon; sid:200009059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsorangesmsmessage.myfreesites.net",nocase; classtype:attempted-recon; sid:200009060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smsverificationmms.myfreesites.net",nocase; classtype:attempted-recon; sid:200009061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn-066660.ultimatefreehost.in",nocase; classtype:attempted-recon; sid:200009062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn-28273739.ihostfull.com",nocase; classtype:attempted-recon; sid:200009063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn0010192920.byethost5.com",nocase; classtype:attempted-recon; sid:200009064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn01002900.byethost5.com",nocase; classtype:attempted-recon; sid:200009065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn28393030.liveblog365.com",nocase; classtype:attempted-recon; sid:200009066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sn91892939.byethost15.com",nocase; classtype:attempted-recon; sid:200009067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snn919200390.liveblog365.com",nocase; classtype:attempted-recon; sid:200009068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snowy-brook-6802.on.fleek.co",nocase; classtype:attempted-recon; sid:200009069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snowy-sun-5b1e.tobyshan.workers.dev",nocase; classtype:attempted-recon; sid:200009070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snowy-viol.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200009071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"snt-manometr.ru",nocase; classtype:attempted-recon; sid:200009072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sobresercorpo.com.br",nocase; classtype:attempted-recon; sid:200009073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soecloud-6ccbd.web.app",nocase; classtype:attempted-recon; sid:200009074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.00147.cn",nocase; classtype:attempted-recon; sid:200009075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.1105sss.xyz",nocase; classtype:attempted-recon; sid:200009076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.1v12v2.xyz",nocase; classtype:attempted-recon; sid:200009077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.4-4-j-diu20.xyz",nocase; classtype:attempted-recon; sid:200009078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.4-4-j-hnh19.xyz",nocase; classtype:attempted-recon; sid:200009079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.4-4-j-lop9.xyz",nocase; classtype:attempted-recon; sid:200009080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.4-4-j-omg16.xyz",nocase; classtype:attempted-recon; sid:200009081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.4-4-j-qpo2.xyz",nocase; classtype:attempted-recon; sid:200009082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.4-4-j-tyw10.xyz",nocase; classtype:attempted-recon; sid:200009083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.4-4-j-wbn12.xyz",nocase; classtype:attempted-recon; sid:200009084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.4-4-j-xcs4.xyz",nocase; classtype:attempted-recon; sid:200009085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.4-4-j-zzd17.xyz",nocase; classtype:attempted-recon; sid:200009086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.5634633.xyz",nocase; classtype:attempted-recon; sid:200009087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.76-u-gbf8.xyz",nocase; classtype:attempted-recon; sid:200009088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.76-u-rtmj.xyz",nocase; classtype:attempted-recon; sid:200009089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.76-u-rvc3.xyz",nocase; classtype:attempted-recon; sid:200009090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.76-u-tyw20.xyz",nocase; classtype:attempted-recon; sid:200009091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.76-u-vve13.xyz",nocase; classtype:attempted-recon; sid:200009092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.76-u-wbn2.xyz",nocase; classtype:attempted-recon; sid:200009093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.76-u-wsd10.xyz",nocase; classtype:attempted-recon; sid:200009094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.76-u-xds5.xyz",nocase; classtype:attempted-recon; sid:200009095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.76-u-zxcv.xyz",nocase; classtype:attempted-recon; sid:200009096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.76-u-zzd12.xyz",nocase; classtype:attempted-recon; sid:200009097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.anoni.shop",nocase; classtype:attempted-recon; sid:200009098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.cawut.top",nocase; classtype:attempted-recon; sid:200009099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.cctzt.top",nocase; classtype:attempted-recon; sid:200009100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.cdfsiejkf.icu",nocase; classtype:attempted-recon; sid:200009101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.cinoe.top",nocase; classtype:attempted-recon; sid:200009102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.cvxot.top",nocase; classtype:attempted-recon; sid:200009103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.earla.shop",nocase; classtype:attempted-recon; sid:200009104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.eoewz.top",nocase; classtype:attempted-recon; sid:200009105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.evrrm.top",nocase; classtype:attempted-recon; sid:200009106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.ezmzo.top",nocase; classtype:attempted-recon; sid:200009107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.fzapp.icu",nocase; classtype:attempted-recon; sid:200009108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.heterm.shop",nocase; classtype:attempted-recon; sid:200009109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.irand.shop",nocase; classtype:attempted-recon; sid:200009110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.iuzat.top",nocase; classtype:attempted-recon; sid:200009111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.ixras.top",nocase; classtype:attempted-recon; sid:200009112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.izcti.top",nocase; classtype:attempted-recon; sid:200009113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.jiaoyimao609.xyz",nocase; classtype:attempted-recon; sid:200009114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.junzi123.xyz",nocase; classtype:attempted-recon; sid:200009115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.kmfmuq.shop",nocase; classtype:attempted-recon; sid:200009116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.llsy456.xyz",nocase; classtype:attempted-recon; sid:200009117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.logous.shop",nocase; classtype:attempted-recon; sid:200009118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.marsaw.shop",nocase; classtype:attempted-recon; sid:200009119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.melobo.shop",nocase; classtype:attempted-recon; sid:200009120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.mturv.top",nocase; classtype:attempted-recon; sid:200009121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.mumban.shop",nocase; classtype:attempted-recon; sid:200009122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.nrxco.top",nocase; classtype:attempted-recon; sid:200009123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.osamar.shop",nocase; classtype:attempted-recon; sid:200009124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.oueoa.top",nocase; classtype:attempted-recon; sid:200009125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.ozeez.top",nocase; classtype:attempted-recon; sid:200009126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.polyes.shop",nocase; classtype:attempted-recon; sid:200009127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.posium.shop",nocase; classtype:attempted-recon; sid:200009128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.reliev.shop",nocase; classtype:attempted-recon; sid:200009129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.rnonv.top",nocase; classtype:attempted-recon; sid:200009130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.ronzm.top",nocase; classtype:attempted-recon; sid:200009131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.siw123.xyz",nocase; classtype:attempted-recon; sid:200009132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.siw234.xyz",nocase; classtype:attempted-recon; sid:200009133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.tenxo.top",nocase; classtype:attempted-recon; sid:200009134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.tzsnz.top",nocase; classtype:attempted-recon; sid:200009135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.urria.top",nocase; classtype:attempted-recon; sid:200009136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.uukf76.xyz",nocase; classtype:attempted-recon; sid:200009137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.vaswa.top",nocase; classtype:attempted-recon; sid:200009138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.viitt.top",nocase; classtype:attempted-recon; sid:200009139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.villau.shop",nocase; classtype:attempted-recon; sid:200009140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.vipjym1.xyz",nocase; classtype:attempted-recon; sid:200009141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.vxaet.top",nocase; classtype:attempted-recon; sid:200009142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.vzrav.top",nocase; classtype:attempted-recon; sid:200009143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.wwcim.top",nocase; classtype:attempted-recon; sid:200009144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.wzzws.top",nocase; classtype:attempted-recon; sid:200009145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.xnxrr.top",nocase; classtype:attempted-recon; sid:200009146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.xsczs.top",nocase; classtype:attempted-recon; sid:200009147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.xxavn.top",nocase; classtype:attempted-recon; sid:200009148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.zanms.top",nocase; classtype:attempted-recon; sid:200009149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.zbj0.shop",nocase; classtype:attempted-recon; sid:200009150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.zewss.top",nocase; classtype:attempted-recon; sid:200009151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.zhutai123.xyz",nocase; classtype:attempted-recon; sid:200009152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.zznwe.top",nocase; classtype:attempted-recon; sid:200009153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sofe-firma.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soft-cell-8148.updateloginprogram.workers.dev",nocase; classtype:attempted-recon; sid:200009155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soft-paper-3207.on.fleek.co",nocase; classtype:attempted-recon; sid:200009156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sohbetkeyf.net",nocase; classtype:attempted-recon; sid:200009157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sol-community.com",nocase; classtype:attempted-recon; sid:200009158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solana-great.com",nocase; classtype:attempted-recon; sid:200009159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solana-gt.com",nocase; classtype:attempted-recon; sid:200009160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solana10x.com",nocase; classtype:attempted-recon; sid:200009161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solanahackerhouse.com",nocase; classtype:attempted-recon; sid:200009162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solanatimes.io",nocase; classtype:attempted-recon; sid:200009163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solanaverse.info",nocase; classtype:attempted-recon; sid:200009164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soleilinc.com",nocase; classtype:attempted-recon; sid:200009165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solicitudprestamoalinstante-lbkperu.com",nocase; classtype:attempted-recon; sid:200009166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solitar.tempetahu.workers.dev",nocase; classtype:attempted-recon; sid:200009167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solitary-moon-3138.on.fleek.co",nocase; classtype:attempted-recon; sid:200009168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solscan.biz",nocase; classtype:attempted-recon; sid:200009169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solscan.de",nocase; classtype:attempted-recon; sid:200009170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucao-para-todos.com",nocase; classtype:attempted-recon; sid:200009171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucaodigitalmaio.com",nocase; classtype:attempted-recon; sid:200009172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucionesach.com",nocase; classtype:attempted-recon; sid:200009173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucoes-para-nos.com",nocase; classtype:attempted-recon; sid:200009174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"somethingmoreconference.com",nocase; classtype:attempted-recon; sid:200009175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sonyaescaringhands.org",nocase; classtype:attempted-recon; sid:200009176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soofeesfriends.com",nocase; classtype:attempted-recon; sid:200009177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sopac.org.py",nocase; classtype:attempted-recon; sid:200009178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sopficohsaonline.webcindario.com",nocase; classtype:attempted-recon; sid:200009179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sosssogdadddyrealsasssreala.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sosssogdadddyrealsasssreala.web.app",nocase; classtype:attempted-recon; sid:200009181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"souaxwaoh.myfreesites.net",nocase; classtype:attempted-recon; sid:200009182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soude-masi.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soufsont.blogspot.com",nocase; classtype:attempted-recon; sid:200009184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soumya252000.github.io",nocase; classtype:attempted-recon; sid:200009185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sourceonepro.com",nocase; classtype:attempted-recon; sid:200009186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamerica-east1-hardy-magpie-334101.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200009187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamerica-east1-my-project-90086352.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200009188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamerica-east1-noted-minutia-330211.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200009189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southamerica-east1-sonic-progress-333805.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200009190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"southernsokka.online",nocase; classtype:attempted-recon; sid:200009191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sp39987.sitebeat.site",nocase; classtype:attempted-recon; sid:200009192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sp477389.sitebeat.site",nocase; classtype:attempted-recon; sid:200009193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sp701876.sitebeat.site",nocase; classtype:attempted-recon; sid:200009194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sp839590.sitebeat.crazydomains.com",nocase; classtype:attempted-recon; sid:200009195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spanxoxo.com",nocase; classtype:attempted-recon; sid:200009196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spark.shaheenwrites.com",nocase; classtype:attempted-recon; sid:200009197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkase-einloggen.xyz",nocase; classtype:attempted-recon; sid:200009198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkase-hauptmenu.xyz",nocase; classtype:attempted-recon; sid:200009199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkasse-haspa.de",nocase; classtype:attempted-recon; sid:200009200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkasse-proton.de",nocase; classtype:attempted-recon; sid:200009201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkasse.allgemeine-geschaeftsbedinungen.info",nocase; classtype:attempted-recon; sid:200009202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkling-bar-cbbd.onedriveonline1617.workers.dev",nocase; classtype:attempted-recon; sid:200009203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparkling-glitter-159f.scrtygdjahg.workers.dev",nocase; classtype:attempted-recon; sid:200009204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sparxinteriors.co.zw",nocase; classtype:attempted-recon; sid:200009205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"specialnotice.namenewamazoncard.cyou",nocase; classtype:attempted-recon; sid:200009206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spectrumonlineweb.weebly.com",nocase; classtype:attempted-recon; sid:200009207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spectrumstorageaccess.yahoosites.com",nocase; classtype:attempted-recon; sid:200009208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spemail5.online",nocase; classtype:attempted-recon; sid:200009209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sphere-launchpad.com",nocase; classtype:attempted-recon; sid:200009210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spimetechnology.com",nocase; classtype:attempted-recon; sid:200009211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spirecg.corsetul-boston.ro",nocase; classtype:attempted-recon; sid:200009212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spirit.gtwozone.com",nocase; classtype:attempted-recon; sid:200009213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spiritswap-gow.blogspot.com",nocase; classtype:attempted-recon; sid:200009214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spjbusiness.com",nocase; classtype:attempted-recon; sid:200009215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spkde-srv01.de",nocase; classtype:attempted-recon; sid:200009216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"splahard.ru",nocase; classtype:attempted-recon; sid:200009217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"spookyswaps.com",nocase; classtype:attempted-recon; sid:200009218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sport.protected-secur.workers.dev",nocase; classtype:attempted-recon; sid:200009219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sportsbrooks.top",nocase; classtype:attempted-recon; sid:200009220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sprechls.blogspot.com",nocase; classtype:attempted-recon; sid:200009221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"springsautoalpina.co.za",nocase; classtype:attempted-recon; sid:200009222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sprtrcvry.cnfrmacn.scrthlp.workers.dev",nocase; classtype:attempted-recon; sid:200009223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sprw.io",nocase; classtype:attempted-recon; sid:200009224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sqkufy.com",nocase; classtype:attempted-recon; sid:200009225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sqlqlsjwbf.timothy-aldridge9995.workers.dev",nocase; classtype:attempted-recon; sid:200009226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sqssssss23rrw.godaddysites.com",nocase; classtype:attempted-recon; sid:200009227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"srchrank.com",nocase; classtype:attempted-recon; sid:200009228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sruityacoontsidenityty.co.vu",nocase; classtype:attempted-recon; sid:200009229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"srv177930.hoster-test.ru",nocase; classtype:attempted-recon; sid:200009230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ss12.info",nocase; classtype:attempted-recon; sid:200009231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sserverd-70496.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sserverd-70496.web.app",nocase; classtype:attempted-recon; sid:200009233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sso-garena.com",nocase; classtype:attempted-recon; sid:200009234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ssowebsrr435546.srvrwwalker.workers.dev",nocase; classtype:attempted-recon; sid:200009235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sssdrsrrsrsrrsf.weeblysite.com",nocase; classtype:attempted-recon; sid:200009236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stage.vannaryfowler.com",nocase; classtype:attempted-recon; sid:200009237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staging-app.1inch.io.s3-website-us-west-1.amazonaws.com",nocase; classtype:attempted-recon; sid:200009238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staging.aisecureme.com",nocase; classtype:attempted-recon; sid:200009239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staging.egfwd.com",nocase; classtype:attempted-recon; sid:200009240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staging.eliteautomotive.com.au",nocase; classtype:attempted-recon; sid:200009241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staman.synology.me",nocase; classtype:attempted-recon; sid:200009242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stancepunks.com",nocase; classtype:attempted-recon; sid:200009243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"star-cup.com",nocase; classtype:attempted-recon; sid:200009244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"staratlas.os.com.tr",nocase; classtype:attempted-recon; sid:200009245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starliker.net",nocase; classtype:attempted-recon; sid:200009246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starlinginvestments.com",nocase; classtype:attempted-recon; sid:200009247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starsoftheindustry.com",nocase; classtype:attempted-recon; sid:200009248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starttsboxfile.myfreesites.net",nocase; classtype:attempted-recon; sid:200009249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"starzak.webd.pl",nocase; classtype:attempted-recon; sid:200009250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"static-ak-fbcdn.atspace.com",nocase; classtype:attempted-recon; sid:200009251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"statisticssuccessheroes.com",nocase; classtype:attempted-recon; sid:200009252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"statusgeneral.c1.biz",nocase; classtype:attempted-recon; sid:200009253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stclarechurch.net",nocase; classtype:attempted-recon; sid:200009254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommunityf.com",nocase; classtype:attempted-recon; sid:200009255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommunityii.club",nocase; classtype:attempted-recon; sid:200009256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcommunuitly.com",nocase; classtype:attempted-recon; sid:200009257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamcomuninty.com",nocase; classtype:attempted-recon; sid:200009258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steamgift.org.ru",nocase; classtype:attempted-recon; sid:200009259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steep.bengkakbibirkuuu.workers.dev",nocase; classtype:attempted-recon; sid:200009260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steep.kacangrecinonfirem.workers.dev",nocase; classtype:attempted-recon; sid:200009261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stefanzimmerli.com",nocase; classtype:attempted-recon; sid:200009262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepapp-minting.com",nocase; classtype:attempted-recon; sid:200009263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepapps.net",nocase; classtype:attempted-recon; sid:200009264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepn-bayc.com",nocase; classtype:attempted-recon; sid:200009265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepn.re",nocase; classtype:attempted-recon; sid:200009266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stepndrop.cc",nocase; classtype:attempted-recon; sid:200009267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steris.cloud",nocase; classtype:attempted-recon; sid:200009268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevemaddencanadashoes.com",nocase; classtype:attempted-recon; sid:200009269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevemaddennetherlands.com",nocase; classtype:attempted-recon; sid:200009270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevemaddenshoe.net",nocase; classtype:attempted-recon; sid:200009271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stevencrews.com",nocase; classtype:attempted-recon; sid:200009272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stnweb.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stnweb.web.app",nocase; classtype:attempted-recon; sid:200009274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stolizaparketa.ru",nocase; classtype:attempted-recon; sid:200009275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.yandexcloud.net",nocase; classtype:attempted-recon; sid:200009276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi2.fleek.co",nocase; classtype:attempted-recon; sid:200009277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storenike365.top",nocase; classtype:attempted-recon; sid:200009278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stornompsiena.me",nocase; classtype:attempted-recon; sid:200009279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"streetsatwar.com",nocase; classtype:attempted-recon; sid:200009280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"strikeitalia.com",nocase; classtype:attempted-recon; sid:200009281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"strugglestokids.com",nocase; classtype:attempted-recon; sid:200009282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"student.auckland.nz.zrdigital.cn",nocase; classtype:attempted-recon; sid:200009283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"studio-lol.com",nocase; classtype:attempted-recon; sid:200009284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"studiodesignism.com",nocase; classtype:attempted-recon; sid:200009285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stuye3890.byethost6.com",nocase; classtype:attempted-recon; sid:200009286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stylifehomedecors.com",nocase; classtype:attempted-recon; sid:200009287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suas-solucoes.com",nocase; classtype:attempted-recon; sid:200009288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sub283.antikrys.xyz",nocase; classtype:attempted-recon; sid:200009289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"subsidyandloan.com",nocase; classtype:attempted-recon; sid:200009290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sucursal29854888.hostfree.pw",nocase; classtype:attempted-recon; sid:200009291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sucursalpersonas.transaccioness.brcams.co.uk",nocase; classtype:attempted-recon; sid:200009292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suelunn.com",nocase; classtype:attempted-recon; sid:200009293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sugisugichan.info",nocase; classtype:attempted-recon; sid:200009294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suicouli.tk",nocase; classtype:attempted-recon; sid:200009295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suiviticket.co",nocase; classtype:attempted-recon; sid:200009296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sukienfreefire.grerena.vn",nocase; classtype:attempted-recon; sid:200009297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sultan-raza.github.io",nocase; classtype:attempted-recon; sid:200009298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sumary.repport-fb.accts-protocol.workers.dev",nocase; classtype:attempted-recon; sid:200009299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sumed.pencildemo.com",nocase; classtype:attempted-recon; sid:200009300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"summary-fb.report-accts-notification.workers.dev",nocase; classtype:attempted-recon; sid:200009301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"summary-protocol.report-accts-notification.workers.dev",nocase; classtype:attempted-recon; sid:200009302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"summer-frost-9891.on.fleek.co",nocase; classtype:attempted-recon; sid:200009303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"summer-math-6132.on.fleek.co",nocase; classtype:attempted-recon; sid:200009304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"summer-meadow-0080.on.fleek.co",nocase; classtype:attempted-recon; sid:200009305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sunnylandingpages.com",nocase; classtype:attempted-recon; sid:200009306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supe.seharusnyakita.workers.dev",nocase; classtype:attempted-recon; sid:200009307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supervillesacces.com",nocase; classtype:attempted-recon; sid:200009308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suportepjcef.com",nocase; classtype:attempted-recon; sid:200009309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supp-account7.com",nocase; classtype:attempted-recon; sid:200009310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supp0rt-ovh.web.app",nocase; classtype:attempted-recon; sid:200009311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-dapps.info",nocase; classtype:attempted-recon; sid:200009312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support.att0n1ine.workers.dev",nocase; classtype:attempted-recon; sid:200009313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support1xreconnectingmailru.weebly.com",nocase; classtype:attempted-recon; sid:200009314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support_admin08.godaddysites.com",nocase; classtype:attempted-recon; sid:200009315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suqogom.com",nocase; classtype:attempted-recon; sid:200009316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sur3cr.csb.app",nocase; classtype:attempted-recon; sid:200009317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"survey18-aws.toluna.com",nocase; classtype:attempted-recon; sid:200009318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyol.com",nocase; classtype:attempted-recon; sid:200009319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suspension-compte.com",nocase; classtype:attempted-recon; sid:200009320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"suxumlodtg.duckdns.org",nocase; classtype:attempted-recon; sid:200009321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swanholm.net",nocase; classtype:attempted-recon; sid:200009322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swantutorsonline.com",nocase; classtype:attempted-recon; sid:200009323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swap-bsc.tokentool.club",nocase; classtype:attempted-recon; sid:200009324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swappauto.staging.lcsolutions.it",nocase; classtype:attempted-recon; sid:200009325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swapuni.org",nocase; classtype:attempted-recon; sid:200009326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sweet-smoke-1565.on.fleek.co",nocase; classtype:attempted-recon; sid:200009327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sweet-sound-ba1a.sharepointonline-live2248.workers.dev",nocase; classtype:attempted-recon; sid:200009328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sweetooth.wl-now.com",nocase; classtype:attempted-recon; sid:200009329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swipeindustry.com",nocase; classtype:attempted-recon; sid:200009330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swissascom-a3777a.ingress-comporellon.ewp.live",nocase; classtype:attempted-recon; sid:200009331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swisscom.myfreesites.net",nocase; classtype:attempted-recon; sid:200009332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"switstart.blogspot.com",nocase; classtype:attempted-recon; sid:200009333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"switzapps.blogspot.com",nocase; classtype:attempted-recon; sid:200009334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syatwea.com",nocase; classtype:attempted-recon; sid:200009335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sydenhampharma.com",nocase; classtype:attempted-recon; sid:200009336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sygeforsikring.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sygeforsikring.web.app",nocase; classtype:attempted-recon; sid:200009338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"symabeautyoriginal.com",nocase; classtype:attempted-recon; sid:200009339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"synaxisreadymix.com",nocase; classtype:attempted-recon; sid:200009340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sync-integration.net",nocase; classtype:attempted-recon; sid:200009341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syncauthentication.com",nocase; classtype:attempted-recon; sid:200009342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syncdappconnect.com",nocase; classtype:attempted-recon; sid:200009343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"synchconnect.tk",nocase; classtype:attempted-recon; sid:200009344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"synctavosima.cf",nocase; classtype:attempted-recon; sid:200009345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"syracuseinfo.com",nocase; classtype:attempted-recon; sid:200009346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"systems-bjoska.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"systems-bjoska.web.app",nocase; classtype:attempted-recon; sid:200009348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ta0sqz05o.top",nocase; classtype:attempted-recon; sid:200009349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taher-mohamed-ahmed-saad.github.io",nocase; classtype:attempted-recon; sid:200009350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taichungphoto.org.tw",nocase; classtype:attempted-recon; sid:200009351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tajero.tj",nocase; classtype:attempted-recon; sid:200009352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"takedrop.gq",nocase; classtype:attempted-recon; sid:200009353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"takedrop.org.ru",nocase; classtype:attempted-recon; sid:200009354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talktalkea.weebly.com",nocase; classtype:attempted-recon; sid:200009355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"talsot8239235244.weebly.com",nocase; classtype:attempted-recon; sid:200009356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tambunanajaa.martulangsore.workers.dev",nocase; classtype:attempted-recon; sid:200009357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tascolighting.com",nocase; classtype:attempted-recon; sid:200009358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taskmbox493.softr.app",nocase; classtype:attempted-recon; sid:200009359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tb915hdh89.mfs.gg",nocase; classtype:attempted-recon; sid:200009360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tbm3-x.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tbm3-x.web.app",nocase; classtype:attempted-recon; sid:200009362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tby.eb-sites.com",nocase; classtype:attempted-recon; sid:200009363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tcaconnect.ac-page.com",nocase; classtype:attempted-recon; sid:200009364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tcnc.tw",nocase; classtype:attempted-recon; sid:200009365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tcoe.in",nocase; classtype:attempted-recon; sid:200009366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"td-authweb.net",nocase; classtype:attempted-recon; sid:200009367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tdsecurities.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tdsecurities.web.app",nocase; classtype:attempted-recon; sid:200009369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teamgoogle125590.psee.ly",nocase; classtype:attempted-recon; sid:200009370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tebapit.com",nocase; classtype:attempted-recon; sid:200009371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecdico.es",nocase; classtype:attempted-recon; sid:200009372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecmachine.com.br",nocase; classtype:attempted-recon; sid:200009373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecnols.com",nocase; classtype:attempted-recon; sid:200009374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecnominproductos.com",nocase; classtype:attempted-recon; sid:200009375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"teekitstorage.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200009376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tehacarrasa.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200009377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tekworld-45a49.web.app",nocase; classtype:attempted-recon; sid:200009378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telelearning.daffodilvarsity.edu.bd",nocase; classtype:attempted-recon; sid:200009379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telhanorte-90.blogspot.com",nocase; classtype:attempted-recon; sid:200009380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tellmeliu.github.io",nocase; classtype:attempted-recon; sid:200009381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telomereces.hostfree.pw",nocase; classtype:attempted-recon; sid:200009382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telstra-823a7434e49e.intercom-clicks.com",nocase; classtype:attempted-recon; sid:200009383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"templat65sldh.myfreesites.net",nocase; classtype:attempted-recon; sid:200009384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"temporary-url.com",nocase; classtype:attempted-recon; sid:200009385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tempoverhuizers.nl",nocase; classtype:attempted-recon; sid:200009386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenarius-ro.com",nocase; classtype:attempted-recon; sid:200009387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail1.web.app",nocase; classtype:attempted-recon; sid:200009389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail10.web.app",nocase; classtype:attempted-recon; sid:200009391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail11.web.app",nocase; classtype:attempted-recon; sid:200009393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail12.web.app",nocase; classtype:attempted-recon; sid:200009395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail2.web.app",nocase; classtype:attempted-recon; sid:200009397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail3.web.app",nocase; classtype:attempted-recon; sid:200009399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail4.web.app",nocase; classtype:attempted-recon; sid:200009401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail5.web.app",nocase; classtype:attempted-recon; sid:200009403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail6.web.app",nocase; classtype:attempted-recon; sid:200009405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail7.web.app",nocase; classtype:attempted-recon; sid:200009407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail8.web.app",nocase; classtype:attempted-recon; sid:200009409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail9.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tenkiothauail9.web.app",nocase; classtype:attempted-recon; sid:200009411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"terium.cc",nocase; classtype:attempted-recon; sid:200009412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"terjalapakkz.topijerami.workers.dev",nocase; classtype:attempted-recon; sid:200009413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"terpelsicumple.com",nocase; classtype:attempted-recon; sid:200009414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"test.webclient4.de",nocase; classtype:attempted-recon; sid:200009415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"testadmin.malharinfoway.com",nocase; classtype:attempted-recon; sid:200009416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"testingmicrophonesalertsiconstestingmicrophonesalertsicons.weebly.com",nocase; classtype:attempted-recon; sid:200009417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"testingmir.github.io",nocase; classtype:attempted-recon; sid:200009418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tewoiyva5g2kd.shop",nocase; classtype:attempted-recon; sid:200009419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"texasfreedomrun.com",nocase; classtype:attempted-recon; sid:200009420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tg.pe",nocase; classtype:attempted-recon; sid:200009421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tgfdc.hgjxpuk.cn",nocase; classtype:attempted-recon; sid:200009422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thaitheparos.com",nocase; classtype:attempted-recon; sid:200009423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thamelboutiquehotels.com",nocase; classtype:attempted-recon; sid:200009424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thbitkub.com",nocase; classtype:attempted-recon; sid:200009425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thdhn.vnoyccr.cn",nocase; classtype:attempted-recon; sid:200009426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"the-arenaa.blogspot.com",nocase; classtype:attempted-recon; sid:200009427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"the-jointllc.com",nocase; classtype:attempted-recon; sid:200009428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theautohouse.us",nocase; classtype:attempted-recon; sid:200009429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thebeachleague.com",nocase; classtype:attempted-recon; sid:200009430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theblueone1.com",nocase; classtype:attempted-recon; sid:200009431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thechillipicklecanteen.com",nocase; classtype:attempted-recon; sid:200009432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thedefiantsnft.com",nocase; classtype:attempted-recon; sid:200009433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thefoodmantra.in",nocase; classtype:attempted-recon; sid:200009434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theironinnparlour.co.uk",nocase; classtype:attempted-recon; sid:200009435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thekey.realestate",nocase; classtype:attempted-recon; sid:200009436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"themarketprof.com",nocase; classtype:attempted-recon; sid:200009437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thermalenvironmental.com",nocase; classtype:attempted-recon; sid:200009438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thestarprotein.com",nocase; classtype:attempted-recon; sid:200009439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thestylishinvestor.com",nocase; classtype:attempted-recon; sid:200009440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theveggienews.com",nocase; classtype:attempted-recon; sid:200009441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thewoodcave.co.uk",nocase; classtype:attempted-recon; sid:200009442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thongtacconghanoi.net",nocase; classtype:attempted-recon; sid:200009443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thrashesun.xyz",nocase; classtype:attempted-recon; sid:200009444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"three-retail-live.devicetradein.co.uk",nocase; classtype:attempted-recon; sid:200009445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thrg.ixnxwav.cn",nocase; classtype:attempted-recon; sid:200009446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ticketatt.co.vu",nocase; classtype:attempted-recon; sid:200009447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua1.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua1.web.app",nocase; classtype:attempted-recon; sid:200009449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua10.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua10.web.app",nocase; classtype:attempted-recon; sid:200009451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua11.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua11.web.app",nocase; classtype:attempted-recon; sid:200009453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua12.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua12.web.app",nocase; classtype:attempted-recon; sid:200009455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua2.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua2.web.app",nocase; classtype:attempted-recon; sid:200009457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua3.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua3.web.app",nocase; classtype:attempted-recon; sid:200009459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua4.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua4.web.app",nocase; classtype:attempted-recon; sid:200009461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua5.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua5.web.app",nocase; classtype:attempted-recon; sid:200009463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua6.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua6.web.app",nocase; classtype:attempted-recon; sid:200009465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua7.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua7.web.app",nocase; classtype:attempted-recon; sid:200009467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua8.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiekandhehayua8.web.app",nocase; classtype:attempted-recon; sid:200009469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tight-sky-8967.on.fleek.co",nocase; classtype:attempted-recon; sid:200009470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tigresdelnorte.com",nocase; classtype:attempted-recon; sid:200009471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiict.edu.pk",nocase; classtype:attempted-recon; sid:200009472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"timex-aus.com",nocase; classtype:attempted-recon; sid:200009473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny-unit-6388.on.fleek.co",nocase; classtype:attempted-recon; sid:200009474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tipografieonline.ro",nocase; classtype:attempted-recon; sid:200009475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiqwnakvq246.shop",nocase; classtype:attempted-recon; sid:200009476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"titanic.fareshopping.eu",nocase; classtype:attempted-recon; sid:200009477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tjjdry.co.jp.gdzsd.top",nocase; classtype:attempted-recon; sid:200009478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tlatx.com",nocase; classtype:attempted-recon; sid:200009479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"to-ken.biz",nocase; classtype:attempted-recon; sid:200009480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toanhoc247.edu.vn",nocase; classtype:attempted-recon; sid:200009481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toddler-town.com",nocase; classtype:attempted-recon; sid:200009482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tofxqxggsz.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tokoakriliktm.com",nocase; classtype:attempted-recon; sid:200009484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tomaykovintage.com",nocase; classtype:attempted-recon; sid:200009485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toninshop.in",nocase; classtype:attempted-recon; sid:200009486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"top10songsnews.com",nocase; classtype:attempted-recon; sid:200009487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topcursos2022.com",nocase; classtype:attempted-recon; sid:200009488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topearnersafrica.com",nocase; classtype:attempted-recon; sid:200009489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topgradespices.in",nocase; classtype:attempted-recon; sid:200009490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topskills.ru",nocase; classtype:attempted-recon; sid:200009491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topstocksolutions.com",nocase; classtype:attempted-recon; sid:200009492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"torccolborrachas.blogspot.com",nocase; classtype:attempted-recon; sid:200009493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toreset.namenewamazoncard.link",nocase; classtype:attempted-recon; sid:200009494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tornadocash-ethlink.com",nocase; classtype:attempted-recon; sid:200009495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"totrbt.weebly.com",nocase; classtype:attempted-recon; sid:200009496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"touchfoundation.info",nocase; classtype:attempted-recon; sid:200009497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tourcs-2022.cf",nocase; classtype:attempted-recon; sid:200009498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tourscrims.my.id",nocase; classtype:attempted-recon; sid:200009499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tpbank-thamchieu-mtcn.weebly.com",nocase; classtype:attempted-recon; sid:200009500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tr.cloudmagic.com",nocase; classtype:attempted-recon; sid:200009501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trackerc.osend.in",nocase; classtype:attempted-recon; sid:200009502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trackgroups.unaux.com",nocase; classtype:attempted-recon; sid:200009503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tracking-alert.gq",nocase; classtype:attempted-recon; sid:200009504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tracking.flowii.com",nocase; classtype:attempted-recon; sid:200009505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trade-iq-option-2021.blogspot.com",nocase; classtype:attempted-recon; sid:200009506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trade.dydx.exchange",nocase; classtype:attempted-recon; sid:200009507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tradex-premium.com",nocase; classtype:attempted-recon; sid:200009508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tradingbbex.com",nocase; classtype:attempted-recon; sid:200009509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"traficogrupomolina.com",nocase; classtype:attempted-recon; sid:200009510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"traineerna.com",nocase; classtype:attempted-recon; sid:200009511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trams.mot.go.th",nocase; classtype:attempted-recon; sid:200009512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"transcend.ae",nocase; classtype:attempted-recon; sid:200009513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"transfer-wisea.app.link",nocase; classtype:attempted-recon; sid:200009514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"transferwallet.me",nocase; classtype:attempted-recon; sid:200009515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"travelvisit-mexico.com",nocase; classtype:attempted-recon; sid:200009516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"treex.in",nocase; classtype:attempted-recon; sid:200009517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trepagessecurelitrenmgfg.co.vu",nocase; classtype:attempted-recon; sid:200009518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tresttlewoodontemporafabrics.com",nocase; classtype:attempted-recon; sid:200009519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trgracecompany.com",nocase; classtype:attempted-recon; sid:200009520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trhvrdg.xsykdod.cn",nocase; classtype:attempted-recon; sid:200009521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tribunbalikpapan.com",nocase; classtype:attempted-recon; sid:200009522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tributelandmarks.com",nocase; classtype:attempted-recon; sid:200009523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tronwallet.com.cn",nocase; classtype:attempted-recon; sid:200009524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trustinvesting.org",nocase; classtype:attempted-recon; sid:200009525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trya673434.260mb.net",nocase; classtype:attempted-recon; sid:200009526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trytoshop.com",nocase; classtype:attempted-recon; sid:200009527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ts.my",nocase; classtype:attempted-recon; sid:200009528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ttatithorritati.podcastheritage.fr",nocase; classtype:attempted-recon; sid:200009529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tthree.cn",nocase; classtype:attempted-recon; sid:200009530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ttiyyavaguq462.shop",nocase; classtype:attempted-recon; sid:200009531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ttt883598.wixsite.com",nocase; classtype:attempted-recon; sid:200009532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tttyyuiiikjnbvvvb.weeblysite.com",nocase; classtype:attempted-recon; sid:200009533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tucuentasantander.com",nocase; classtype:attempted-recon; sid:200009534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tudallnewyhattwbversn-106681.square.site",nocase; classtype:attempted-recon; sid:200009535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tudallnewyhattwbversn.weebly.com",nocase; classtype:attempted-recon; sid:200009536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuesdayio1000.web.app",nocase; classtype:attempted-recon; sid:200009537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuesdayio7000.web.app",nocase; classtype:attempted-recon; sid:200009538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuesdayio8000.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuesdayio8000.web.app",nocase; classtype:attempted-recon; sid:200009540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tugcecolakbeauty.com",nocase; classtype:attempted-recon; sid:200009541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tujuyhk.keumnno.cn",nocase; classtype:attempted-recon; sid:200009542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tunecaptcha13.ml",nocase; classtype:attempted-recon; sid:200009543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tunecaptcha16.ml",nocase; classtype:attempted-recon; sid:200009544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tunecaptcha19.ml",nocase; classtype:attempted-recon; sid:200009545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tunecaptcha2.ml",nocase; classtype:attempted-recon; sid:200009546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tunecaptcha6.ml",nocase; classtype:attempted-recon; sid:200009547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tunecaptcha7.ml",nocase; classtype:attempted-recon; sid:200009548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tunecaptcha8.ml",nocase; classtype:attempted-recon; sid:200009549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuneredirects.ml",nocase; classtype:attempted-recon; sid:200009550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuqya1616taa.unaux.com",nocase; classtype:attempted-recon; sid:200009551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuspromociones2022.com",nocase; classtype:attempted-recon; sid:200009552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tutor.iqsademo.com",nocase; classtype:attempted-recon; sid:200009553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuyadestuya.liveblog365.com",nocase; classtype:attempted-recon; sid:200009554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuyainiciarcarlo.hostfree.pw",nocase; classtype:attempted-recon; sid:200009555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuyarvadsghdfdg.great-site.net",nocase; classtype:attempted-recon; sid:200009556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuyatargetone.ihostfull.com",nocase; classtype:attempted-recon; sid:200009557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tvfsv.online",nocase; classtype:attempted-recon; sid:200009558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twibhokiandgraiyakischools.com",nocase; classtype:attempted-recon; sid:200009559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twilig.semangatpuasaaa.workers.dev",nocase; classtype:attempted-recon; sid:200009560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twilight-sunset-6443.on.fleek.co",nocase; classtype:attempted-recon; sid:200009561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twilight.recomfiermsite.workers.dev",nocase; classtype:attempted-recon; sid:200009562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"twin-excuse.dvrlists.com",nocase; classtype:attempted-recon; sid:200009563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tyaprtlahsbj.hostfree.pw",nocase; classtype:attempted-recon; sid:200009564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tyeamservers.on.fleek.co",nocase; classtype:attempted-recon; sid:200009565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"typedream.site",nocase; classtype:attempted-recon; sid:200009566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u14511627.ct.sendgrid.net",nocase; classtype:attempted-recon; sid:200009567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u18741649.ct.sendgrid.net",nocase; classtype:attempted-recon; sid:200009568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u3vii.codesandbox.io",nocase; classtype:attempted-recon; sid:200009569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u8yjj.x1wk1.abesblog.com.",nocase; classtype:attempted-recon; sid:200009570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uat-new.wcv.com",nocase; classtype:attempted-recon; sid:200009571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ubiotoir.com",nocase; classtype:attempted-recon; sid:200009572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uc-new-midasbuy.com",nocase; classtype:attempted-recon; sid:200009573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uconn-edu-online.weebly.com",nocase; classtype:attempted-recon; sid:200009574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uday.mellacheruvu.ultramedicinadiagnostica.com.br",nocase; classtype:attempted-recon; sid:200009575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"udbetaling-sygeforsikring.web.app",nocase; classtype:attempted-recon; sid:200009576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uepabnw.top",nocase; classtype:attempted-recon; sid:200009577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ufkrisq.top",nocase; classtype:attempted-recon; sid:200009578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ugyftdraq.hostfree.pw",nocase; classtype:attempted-recon; sid:200009579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uijkouo.hclcsolutions.com",nocase; classtype:attempted-recon; sid:200009580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uikf.utgwqax.cn",nocase; classtype:attempted-recon; sid:200009581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uiuj9.cf",nocase; classtype:attempted-recon; sid:200009582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uiyh.fqeccqx.cn",nocase; classtype:attempted-recon; sid:200009583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ukd6s.hyperphp.com",nocase; classtype:attempted-recon; sid:200009584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ukfth.asdaegl.cn",nocase; classtype:attempted-recon; sid:200009585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ukraineconsulatelib.azurewebsites.net",nocase; classtype:attempted-recon; sid:200009586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ukrt1s.hyperphp.com",nocase; classtype:attempted-recon; sid:200009587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ukygh.kmdjkyt.cn",nocase; classtype:attempted-recon; sid:200009588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"umbrellas-ksa.com",nocase; classtype:attempted-recon; sid:200009589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ume.la",nocase; classtype:attempted-recon; sid:200009590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"umu.link",nocase; classtype:attempted-recon; sid:200009591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unam.myfreesites.net",nocase; classtype:attempted-recon; sid:200009592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unbossed.net",nocase; classtype:attempted-recon; sid:200009593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uneedparts.ca",nocase; classtype:attempted-recon; sid:200009594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniassessoria.com.br",nocase; classtype:attempted-recon; sid:200009595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unicreditaustria.ucs.info",nocase; classtype:attempted-recon; sid:200009596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unionheightsresidental.com",nocase; classtype:attempted-recon; sid:200009597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unisons.store",nocase; classtype:attempted-recon; sid:200009598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unisonsouthayr.org.uk",nocase; classtype:attempted-recon; sid:200009599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap-exchanges.com",nocase; classtype:attempted-recon; sid:200009600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap-pos.info",nocase; classtype:attempted-recon; sid:200009601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.ch",nocase; classtype:attempted-recon; sid:200009602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.openwallet.dev",nocase; classtype:attempted-recon; sid:200009603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.pages.dev",nocase; classtype:attempted-recon; sid:200009604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.token.im",nocase; classtype:attempted-recon; sid:200009605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.umidao.org",nocase; classtype:attempted-recon; sid:200009606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswap.v2.testnet.pulsechain.com",nocase; classtype:attempted-recon; sid:200009607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uniswapfinancing.info",nocase; classtype:attempted-recon; sid:200009608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unlon-persomal.thisphase.com",nocase; classtype:attempted-recon; sid:200009609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unread-disk-5eb0.important1.workers.dev",nocase; classtype:attempted-recon; sid:200009610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unsub.listhandlr.com",nocase; classtype:attempted-recon; sid:200009611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unusual-logondetected.com",nocase; classtype:attempted-recon; sid:200009612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upbearin.xyz",nocase; classtype:attempted-recon; sid:200009613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upcday.com",nocase; classtype:attempted-recon; sid:200009614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updat3s.atts3rvices.workers.dev",nocase; classtype:attempted-recon; sid:200009615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"update-doc.list-project-shared.workers.dev",nocase; classtype:attempted-recon; sid:200009616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"update-jp.airpeakbase.cn",nocase; classtype:attempted-recon; sid:200009617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"update-jp.hassjcv.cn",nocase; classtype:attempted-recon; sid:200009618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"update-netprofile.com",nocase; classtype:attempted-recon; sid:200009619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"update-wallets.com",nocase; classtype:attempted-recon; sid:200009620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"update.com.brandonanything.com",nocase; classtype:attempted-recon; sid:200009621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updateautofaildomainconfigmanuallyadmin.pages.dev",nocase; classtype:attempted-recon; sid:200009622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatemails20222.weebly.com",nocase; classtype:attempted-recon; sid:200009623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatescseritysacoountss.co.vu",nocase; classtype:attempted-recon; sid:200009624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatess.cfzijxcsp.workers.dev",nocase; classtype:attempted-recon; sid:200009625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updatevoda-billing.com",nocase; classtype:attempted-recon; sid:200009626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"updtesidentityaccountsferivy.co.vu",nocase; classtype:attempted-recon; sid:200009627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"upgradepage.cc",nocase; classtype:attempted-recon; sid:200009628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uploads.codesandbox.io",nocase; classtype:attempted-recon; sid:200009629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uplopenexchange.com",nocase; classtype:attempted-recon; sid:200009630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ups.tracking.zlihks.shop",nocase; classtype:attempted-recon; sid:200009631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uqtjhcsga4.shop",nocase; classtype:attempted-recon; sid:200009632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urbanafm.ec",nocase; classtype:attempted-recon; sid:200009633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uri.im",nocase; classtype:attempted-recon; sid:200009634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.xcode.no",nocase; classtype:attempted-recon; sid:200009635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urli.ws",nocase; classtype:attempted-recon; sid:200009636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlly.eu",nocase; classtype:attempted-recon; sid:200009637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-central1-x-descent-340319.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200009638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-east1-x-descent-340319.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200009639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"us-west4-mercurial-idiom-334123.cloudfunctions.net",nocase; classtype:attempted-recon; sid:200009640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usa-uksp.com",nocase; classtype:attempted-recon; sid:200009641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usdt-finance.cc",nocase; classtype:attempted-recon; sid:200009642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"used-furniturebuyersindubai.com",nocase; classtype:attempted-recon; sid:200009643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"used-jaccs--jp-login1.workers.dev",nocase; classtype:attempted-recon; sid:200009644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"used-my-connect-au-login6.workers.dev",nocase; classtype:attempted-recon; sid:200009645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usedtextilemachinery4sale.com",nocase; classtype:attempted-recon; sid:200009646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user-olivierclemot.flazio.com",nocase; classtype:attempted-recon; sid:200009647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user-security.net",nocase; classtype:attempted-recon; sid:200009648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"userboitevocalweb.flazio.com",nocase; classtype:attempted-recon; sid:200009649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"userinformationstoreupdatesmail.pages.dev",nocase; classtype:attempted-recon; sid:200009650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"users-76533.flywheelsites.com",nocase; classtype:attempted-recon; sid:200009651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"users.tpg.com.au",nocase; classtype:attempted-recon; sid:200009652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"userservicesupiateone14.000webhostapp.com",nocase; classtype:attempted-recon; sid:200009653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usfn.net",nocase; classtype:attempted-recon; sid:200009654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"usps-tracking.hectorcalle.com",nocase; classtype:attempted-recon; sid:200009655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsecureparcel.wonstasite.com",nocase; classtype:attempted-recon; sid:200009656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspsfastlogin.com",nocase; classtype:attempted-recon; sid:200009657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uspstrackparcelonlineredeliv.builderallwppro.com",nocase; classtype:attempted-recon; sid:200009658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"utahvalleyrides.org",nocase; classtype:attempted-recon; sid:200009659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uv09s6357.riggearf.com",nocase; classtype:attempted-recon; sid:200009660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uverdnes.cz",nocase; classtype:attempted-recon; sid:200009661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uweezy1.wixsite.com",nocase; classtype:attempted-recon; sid:200009662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uwsantanderflow.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uwsantanderflow.web.app",nocase; classtype:attempted-recon; sid:200009664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uxs8ti.csb.app",nocase; classtype:attempted-recon; sid:200009665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v-verify-pembatalan-pemblokiran.webnode.page",nocase; classtype:attempted-recon; sid:200009666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vaaveeasie.okzxlvo.asso.ci",nocase; classtype:attempted-recon; sid:200009667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vadbike.com",nocase; classtype:attempted-recon; sid:200009668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valarqss.hyperphp.com",nocase; classtype:attempted-recon; sid:200009669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valenciaoptometry.com",nocase; classtype:attempted-recon; sid:200009670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validaciondecitacr.webnode.cr",nocase; classtype:attempted-recon; sid:200009671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validacionpichincha.odoo.com",nocase; classtype:attempted-recon; sid:200009672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validationmailboxx.weebly.com",nocase; classtype:attempted-recon; sid:200009673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valkonp.top",nocase; classtype:attempted-recon; sid:200009674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valobom.com",nocase; classtype:attempted-recon; sid:200009675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"valuesfordailyliving.com",nocase; classtype:attempted-recon; sid:200009676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vbid2022-neueupdate-html.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vbid2022-neueupdate-html.web.app",nocase; classtype:attempted-recon; sid:200009678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vbjakuwt4128.shop",nocase; classtype:attempted-recon; sid:200009679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vc-107510.weeblysite.com",nocase; classtype:attempted-recon; sid:200009680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vcnowre3i8gfv-0p3w8h4rg0-fphw0-g8vih04rweg.obs.ap-southeast-2.myhuaweicloud.com",nocase; classtype:attempted-recon; sid:200009681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veefriends-nft-giveaway.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veefriends-nft-giveaway.web.app",nocase; classtype:attempted-recon; sid:200009683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vektrofoods.com",nocase; classtype:attempted-recon; sid:200009684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veraheil.de",nocase; classtype:attempted-recon; sid:200009685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veranope.wwwaz1-ss44.a2hosted.com",nocase; classtype:attempted-recon; sid:200009686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veraodeoportunidades.com",nocase; classtype:attempted-recon; sid:200009687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veredicto63.hostfree.pw",nocase; classtype:attempted-recon; sid:200009688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verheyen-koen-be.godaddysites.com",nocase; classtype:attempted-recon; sid:200009689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verification-roundcube.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verification-roundcube.web.app",nocase; classtype:attempted-recon; sid:200009691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verification.fb-page.workers.dev",nocase; classtype:attempted-recon; sid:200009692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verificationmessage.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200009693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verificationmetamask.rf.gd",nocase; classtype:attempted-recon; sid:200009694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-akun-anda0011.weeblysite.com",nocase; classtype:attempted-recon; sid:200009695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-akun-anda999.weebly.com",nocase; classtype:attempted-recon; sid:200009696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-akun-facebook0022.weeblysite.com",nocase; classtype:attempted-recon; sid:200009697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-facebook-anda9.webnode.page",nocase; classtype:attempted-recon; sid:200009698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasi-identitas9.weebly.com",nocase; classtype:attempted-recon; sid:200009699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasidi2022.weebly.com",nocase; classtype:attempted-recon; sid:200009700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifikasipemblokiran0.weebly.com",nocase; classtype:attempted-recon; sid:200009701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verify-your-identity-pages2022.cf",nocase; classtype:attempted-recon; sid:200009702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verifyurcitizens.serveirc.com",nocase; classtype:attempted-recon; sid:200009703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"veriifiikasi-akun2022.weebly.com",nocase; classtype:attempted-recon; sid:200009704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"verilyverily.us",nocase; classtype:attempted-recon; sid:200009705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"versionnewwebsevres-107719.square.site",nocase; classtype:attempted-recon; sid:200009706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vfgbd.1q6dtr.cn",nocase; classtype:attempted-recon; sid:200009707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vi77h-2qaaa-aaaad-qciya-cai.raw.ic0.app",nocase; classtype:attempted-recon; sid:200009708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vibramwyprzedaz.com",nocase; classtype:attempted-recon; sid:200009709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicaseisni-vsoamsnensvi.iirpibn.md.ci",nocase; classtype:attempted-recon; sid:200009710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicblock.co.ke",nocase; classtype:attempted-recon; sid:200009711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"victorarath99.github.io",nocase; classtype:attempted-recon; sid:200009712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.0wmh288g.com.cn",nocase; classtype:attempted-recon; sid:200009713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.277500.com.cn",nocase; classtype:attempted-recon; sid:200009714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.2980415.com.cn",nocase; classtype:attempted-recon; sid:200009715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.4oylm13.com.cn",nocase; classtype:attempted-recon; sid:200009716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.687feyac.com.cn",nocase; classtype:attempted-recon; sid:200009717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.aa2cpc7.com.cn",nocase; classtype:attempted-recon; sid:200009718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.anmg94.com.cn",nocase; classtype:attempted-recon; sid:200009719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.bgjkcn.com.cn",nocase; classtype:attempted-recon; sid:200009720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.cannmedia.com.cn",nocase; classtype:attempted-recon; sid:200009721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.cechuan.com.cn",nocase; classtype:attempted-recon; sid:200009722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.dgrunding.com.cn",nocase; classtype:attempted-recon; sid:200009723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.diandianbei.com.cn",nocase; classtype:attempted-recon; sid:200009724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.enzuan.com.cn",nocase; classtype:attempted-recon; sid:200009725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.facesmile.com.cn",nocase; classtype:attempted-recon; sid:200009726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.fkihti.com.cn",nocase; classtype:attempted-recon; sid:200009727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.fouying.com.cn",nocase; classtype:attempted-recon; sid:200009728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.gongzha.com.cn",nocase; classtype:attempted-recon; sid:200009729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.gtm-m.com.cn",nocase; classtype:attempted-recon; sid:200009730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.hansor6.com.cn",nocase; classtype:attempted-recon; sid:200009731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.hfhybh.com.cn",nocase; classtype:attempted-recon; sid:200009732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.jionglai.com.cn",nocase; classtype:attempted-recon; sid:200009733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.jiongruan.com.cn",nocase; classtype:attempted-recon; sid:200009734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.jiongtuo.com.cn",nocase; classtype:attempted-recon; sid:200009735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.jthuuuu.com.cn",nocase; classtype:attempted-recon; sid:200009736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.kasiqi.com.cn",nocase; classtype:attempted-recon; sid:200009737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.kbzfpje.com.cn",nocase; classtype:attempted-recon; sid:200009738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.kljwater.com.cn",nocase; classtype:attempted-recon; sid:200009739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.liehang.com.cn",nocase; classtype:attempted-recon; sid:200009740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.liuyan068.com.cn",nocase; classtype:attempted-recon; sid:200009741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.lunsuo.com.cn",nocase; classtype:attempted-recon; sid:200009742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.mangjiong.com.cn",nocase; classtype:attempted-recon; sid:200009743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.meiyaofz.com.cn",nocase; classtype:attempted-recon; sid:200009744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.miangong.com.cn",nocase; classtype:attempted-recon; sid:200009745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.njhccc.com.cn",nocase; classtype:attempted-recon; sid:200009746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.olr87do.com.cn",nocase; classtype:attempted-recon; sid:200009747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.ontune.com.cn",nocase; classtype:attempted-recon; sid:200009748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.pzblog.com.cn",nocase; classtype:attempted-recon; sid:200009749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.qiangdie.com.cn",nocase; classtype:attempted-recon; sid:200009750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.rcwhmlc.com.cn",nocase; classtype:attempted-recon; sid:200009751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.shaw0m6h.com.cn",nocase; classtype:attempted-recon; sid:200009752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.shuashao.com.cn",nocase; classtype:attempted-recon; sid:200009753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.sochang.com.cn",nocase; classtype:attempted-recon; sid:200009754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.sz-yitong.com.cn",nocase; classtype:attempted-recon; sid:200009755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.yahoo3721.com.cn",nocase; classtype:attempted-recon; sid:200009756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.yc8r6njw.com.cn",nocase; classtype:attempted-recon; sid:200009757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.yuandui.com.cn",nocase; classtype:attempted-recon; sid:200009758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.yueduan.com.cn",nocase; classtype:attempted-recon; sid:200009759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.06cmncai.com.cn",nocase; classtype:attempted-recon; sid:200009760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.101hao.com.cn",nocase; classtype:attempted-recon; sid:200009761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.1hkwatas.com.cn",nocase; classtype:attempted-recon; sid:200009762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.5918wz.com.cn",nocase; classtype:attempted-recon; sid:200009763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.8e0ptyb6.com.cn",nocase; classtype:attempted-recon; sid:200009764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.aomenhua.com.cn",nocase; classtype:attempted-recon; sid:200009765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.boyada.com.cn",nocase; classtype:attempted-recon; sid:200009766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.cansuan.com.cn",nocase; classtype:attempted-recon; sid:200009767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.catk27bl.com.cn",nocase; classtype:attempted-recon; sid:200009768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.cz-dk.com.cn",nocase; classtype:attempted-recon; sid:200009769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.dalianmei.com.cn",nocase; classtype:attempted-recon; sid:200009770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.etmaster.com.cn",nocase; classtype:attempted-recon; sid:200009771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.founty.com.cn",nocase; classtype:attempted-recon; sid:200009772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.fw6yg0a.com.cn",nocase; classtype:attempted-recon; sid:200009773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.gzmidea.com.cn",nocase; classtype:attempted-recon; sid:200009774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.h2mdrb92.com.cn",nocase; classtype:attempted-recon; sid:200009775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.handier.com.cn",nocase; classtype:attempted-recon; sid:200009776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.haozen.com.cn",nocase; classtype:attempted-recon; sid:200009777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.hblongtu.com.cn",nocase; classtype:attempted-recon; sid:200009778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.huaisuo.com.cn",nocase; classtype:attempted-recon; sid:200009779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.i4sm1th5.com.cn",nocase; classtype:attempted-recon; sid:200009780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.igtfvr.com.cn",nocase; classtype:attempted-recon; sid:200009781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.ip2008.com.cn",nocase; classtype:attempted-recon; sid:200009782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.jiongban.com.cn",nocase; classtype:attempted-recon; sid:200009783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.kaspresky.com.cn",nocase; classtype:attempted-recon; sid:200009784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.kidsshoes.com.cn",nocase; classtype:attempted-recon; sid:200009785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.kinglook.com.cn",nocase; classtype:attempted-recon; sid:200009786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.kthxty.com.cn",nocase; classtype:attempted-recon; sid:200009787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.lkdm484h.com.cn",nocase; classtype:attempted-recon; sid:200009788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.luanzhai.com.cn",nocase; classtype:attempted-recon; sid:200009789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.lvdfpl3.com.cn",nocase; classtype:attempted-recon; sid:200009790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.mianmou.com.cn",nocase; classtype:attempted-recon; sid:200009791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.miugun.com.cn",nocase; classtype:attempted-recon; sid:200009792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.noelgifts.com.cn",nocase; classtype:attempted-recon; sid:200009793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.nrxeeee.com.cn",nocase; classtype:attempted-recon; sid:200009794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.o792mwbf.com.cn",nocase; classtype:attempted-recon; sid:200009795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.pangpan.com.cn",nocase; classtype:attempted-recon; sid:200009796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.pclearner.com.cn",nocase; classtype:attempted-recon; sid:200009797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.scwz168.com.cn",nocase; classtype:attempted-recon; sid:200009798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.sholay.com.cn",nocase; classtype:attempted-recon; sid:200009799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.tgnkuv.com.cn",nocase; classtype:attempted-recon; sid:200009800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.tjxsxs.com.cn",nocase; classtype:attempted-recon; sid:200009801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.whship.com.cn",nocase; classtype:attempted-recon; sid:200009802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.willhong.com.cn",nocase; classtype:attempted-recon; sid:200009803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.yaopiao.com.cn",nocase; classtype:attempted-recon; sid:200009804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.yasndwjz.com.cn",nocase; classtype:attempted-recon; sid:200009805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.yo0t1fm.com.cn",nocase; classtype:attempted-recon; sid:200009806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieal.hyperphp.com",nocase; classtype:attempted-recon; sid:200009807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vieirasadvogados.com",nocase; classtype:attempted-recon; sid:200009808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vietgahp.com",nocase; classtype:attempted-recon; sid:200009809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viettel-com-dot-c2c01-531c7.uc.r.appspot.com",nocase; classtype:attempted-recon; sid:200009810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-fileshare-kennugent-coa.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-fileshare-kennugent-coa.web.app",nocase; classtype:attempted-recon; sid:200009812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-folder-share-doc-file.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-folder-share-doc-file.web.app",nocase; classtype:attempted-recon; sid:200009814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-folder-share-doc-logistic.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-folder-share-doc-logistic.web.app",nocase; classtype:attempted-recon; sid:200009816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-share-folder-file-doc.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-share-folder-file-doc.web.app",nocase; classtype:attempted-recon; sid:200009818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-share-folder-file.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-share-folder-file.web.app",nocase; classtype:attempted-recon; sid:200009820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-shared-file-folder-login.firebaseapp.com",nocase; classtype:attempted-recon; sid:200009821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"view-shared-file-folder-login.web.app",nocase; classtype:attempted-recon; sid:200009822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinosdev.com",nocase; classtype:attempted-recon; sid:200009823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vint-ed.sprawa23451.beauty",nocase; classtype:attempted-recon; sid:200009824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vinted3shipping.8756123.xyz",nocase; classtype:attempted-recon; sid:200009825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vintled-23progression1pay.0245175.xyz",nocase; classtype:attempted-recon; sid:200009826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vipfbtools.com",nocase; classtype:attempted-recon; sid:200009827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"virginmediaupdate1111111.weebly.com",nocase; classtype:attempted-recon; sid:200009828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"virtual.labdigbdbqapb.com",nocase; classtype:attempted-recon; sid:200009829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"virtual.labdigbdbstgpb.com",nocase; classtype:attempted-recon; sid:200009830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vis-stort.github.io",nocase; classtype:attempted-recon; sid:200009831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.chenmanqi.top",nocase; classtype:attempted-recon; sid:200009832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.rwmcr.top",nocase; classtype:attempted-recon; sid:200009833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.uvlhwb.top",nocase; classtype:attempted-recon; sid:200009834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.wiguyc.top",nocase; classtype:attempted-recon; sid:200009835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.wkbakq.top",nocase; classtype:attempted-recon; sid:200009836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.wmysah.top",nocase; classtype:attempted-recon; sid:200009837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.wotygl.top",nocase; classtype:attempted-recon; sid:200009838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.wozavw.top",nocase; classtype:attempted-recon; sid:200009839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.xfertf.top",nocase; classtype:attempted-recon; sid:200009840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.xloclk.top",nocase; classtype:attempted-recon; sid:200009841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.xovtfx.top",nocase; classtype:attempted-recon; sid:200009842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.xubnkg.top",nocase; classtype:attempted-recon; sid:200009843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.xvljph.top",nocase; classtype:attempted-recon; sid:200009844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.xvotal.top",nocase; classtype:attempted-recon; sid:200009845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.xwitwq.top",nocase; classtype:attempted-recon; sid:200009846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.ybmkwa.top",nocase; classtype:attempted-recon; sid:200009847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.ydpssl.top",nocase; classtype:attempted-recon; sid:200009848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.yfnvfr.top",nocase; classtype:attempted-recon; sid:200009849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.yfsjiq.top",nocase; classtype:attempted-recon; sid:200009850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.yqggww.top",nocase; classtype:attempted-recon; sid:200009851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.ytbspo.top",nocase; classtype:attempted-recon; sid:200009852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.yvpnxy.top",nocase; classtype:attempted-recon; sid:200009853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.yyyuwr.top",nocase; classtype:attempted-recon; sid:200009854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.yyzded.top",nocase; classtype:attempted-recon; sid:200009855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.zohlkk.top",nocase; classtype:attempted-recon; sid:200009856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.zpirok.top",nocase; classtype:attempted-recon; sid:200009857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.zrzckw.top",nocase; classtype:attempted-recon; sid:200009858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.zusrue.top",nocase; classtype:attempted-recon; sid:200009859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.277500.com.cn",nocase; classtype:attempted-recon; sid:200009860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.2980415.com.cn",nocase; classtype:attempted-recon; sid:200009861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.5o0kizr5.com.cn",nocase; classtype:attempted-recon; sid:200009862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.687feyac.com.cn",nocase; classtype:attempted-recon; sid:200009863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.76cjmrsa.com.cn",nocase; classtype:attempted-recon; sid:200009864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.987sip7.com.cn",nocase; classtype:attempted-recon; sid:200009865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.a598sc0k.com.cn",nocase; classtype:attempted-recon; sid:200009866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.aa2cpc7.com.cn",nocase; classtype:attempted-recon; sid:200009867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.anmg94.com.cn",nocase; classtype:attempted-recon; sid:200009868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.cengtong.com.cn",nocase; classtype:attempted-recon; sid:200009869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.congdui.com.cn",nocase; classtype:attempted-recon; sid:200009870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.coulun.com.cn",nocase; classtype:attempted-recon; sid:200009871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.cr1ny4km.com.cn",nocase; classtype:attempted-recon; sid:200009872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.dinisi.com.cn",nocase; classtype:attempted-recon; sid:200009873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.enzuan.com.cn",nocase; classtype:attempted-recon; sid:200009874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.facesmile.com.cn",nocase; classtype:attempted-recon; sid:200009875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.fkihti.com.cn",nocase; classtype:attempted-recon; sid:200009876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.gtm-m.com.cn",nocase; classtype:attempted-recon; sid:200009877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.guaian.com.cn",nocase; classtype:attempted-recon; sid:200009878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.haotupian.com.cn",nocase; classtype:attempted-recon; sid:200009879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.jiongbing.com.cn",nocase; classtype:attempted-recon; sid:200009880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.jionglai.com.cn",nocase; classtype:attempted-recon; sid:200009881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.jiongtuo.com.cn",nocase; classtype:attempted-recon; sid:200009882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.kasiqi.com.cn",nocase; classtype:attempted-recon; sid:200009883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.kbzfpje.com.cn",nocase; classtype:attempted-recon; sid:200009884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.kljwater.com.cn",nocase; classtype:attempted-recon; sid:200009885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.lhz9r6pc.com.cn",nocase; classtype:attempted-recon; sid:200009886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.liehang.com.cn",nocase; classtype:attempted-recon; sid:200009887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.mangjiong.com.cn",nocase; classtype:attempted-recon; sid:200009888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.meiyaofz.com.cn",nocase; classtype:attempted-recon; sid:200009889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.motomods.com.cn",nocase; classtype:attempted-recon; sid:200009890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.njhccc.com.cn",nocase; classtype:attempted-recon; sid:200009891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.ojiwsle5.com.cn",nocase; classtype:attempted-recon; sid:200009892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.olr87do.com.cn",nocase; classtype:attempted-recon; sid:200009893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.qiangdie.com.cn",nocase; classtype:attempted-recon; sid:200009894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.rcwhmlc.com.cn",nocase; classtype:attempted-recon; sid:200009895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.shuashao.com.cn",nocase; classtype:attempted-recon; sid:200009896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.sochang.com.cn",nocase; classtype:attempted-recon; sid:200009897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.st4d7h3.com.cn",nocase; classtype:attempted-recon; sid:200009898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.temazu.com.cn",nocase; classtype:attempted-recon; sid:200009899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.tm-701.com.cn",nocase; classtype:attempted-recon; sid:200009900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.whktedcd.com.cn",nocase; classtype:attempted-recon; sid:200009901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.wz5eyhc1.com.cn",nocase; classtype:attempted-recon; sid:200009902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.xrzhvd.com.cn",nocase; classtype:attempted-recon; sid:200009903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.yahoo3721.com.cn",nocase; classtype:attempted-recon; sid:200009904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.yaochuo.com.cn",nocase; classtype:attempted-recon; sid:200009905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.yc8r6njw.com.cn",nocase; classtype:attempted-recon; sid:200009906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.zhankeng.com.cn",nocase; classtype:attempted-recon; sid:200009907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.zxy120.com.cn",nocase; classtype:attempted-recon; sid:200009908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.5918wz.com.cn",nocase; classtype:attempted-recon; sid:200009909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.6ljatk58.com.cn",nocase; classtype:attempted-recon; sid:200009910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.8e0ptyb6.com.cn",nocase; classtype:attempted-recon; sid:200009911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.99diannao.com.cn",nocase; classtype:attempted-recon; sid:200009912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.ai-talk.com.cn",nocase; classtype:attempted-recon; sid:200009913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.aomenhua.com.cn",nocase; classtype:attempted-recon; sid:200009914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.c5bnappc.com.cn",nocase; classtype:attempted-recon; sid:200009915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.cenggua.com.cn",nocase; classtype:attempted-recon; sid:200009916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.cengzhuo.com.cn",nocase; classtype:attempted-recon; sid:200009917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.cjq168.com.cn",nocase; classtype:attempted-recon; sid:200009918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.cz-dk.com.cn",nocase; classtype:attempted-recon; sid:200009919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.dalianmei.com.cn",nocase; classtype:attempted-recon; sid:200009920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.doh48bnj.com.cn",nocase; classtype:attempted-recon; sid:200009921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.etmaster.com.cn",nocase; classtype:attempted-recon; sid:200009922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.f1mdeaia.com.cn",nocase; classtype:attempted-recon; sid:200009923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.f6wperp1.com.cn",nocase; classtype:attempted-recon; sid:200009924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.fczytv.com.cn",nocase; classtype:attempted-recon; sid:200009925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.fengkehui.com.cn",nocase; classtype:attempted-recon; sid:200009926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.founty.com.cn",nocase; classtype:attempted-recon; sid:200009927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.gangnin.com.cn",nocase; classtype:attempted-recon; sid:200009928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.gapang.com.cn",nocase; classtype:attempted-recon; sid:200009929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.gouqiya.com.cn",nocase; classtype:attempted-recon; sid:200009930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.greenlady.com.cn",nocase; classtype:attempted-recon; sid:200009931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.guaichao.com.cn",nocase; classtype:attempted-recon; sid:200009932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.gunjiang.com.cn",nocase; classtype:attempted-recon; sid:200009933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.handier.com.cn",nocase; classtype:attempted-recon; sid:200009934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.hblongtu.com.cn",nocase; classtype:attempted-recon; sid:200009935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.huanbu.com.cn",nocase; classtype:attempted-recon; sid:200009936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.huzhun.com.cn",nocase; classtype:attempted-recon; sid:200009937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.i4sm1th5.com.cn",nocase; classtype:attempted-recon; sid:200009938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.kairao.com.cn",nocase; classtype:attempted-recon; sid:200009939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.kaspresky.com.cn",nocase; classtype:attempted-recon; sid:200009940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.kenteer.com.cn",nocase; classtype:attempted-recon; sid:200009941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.kidsshoes.com.cn",nocase; classtype:attempted-recon; sid:200009942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.kinglook.com.cn",nocase; classtype:attempted-recon; sid:200009943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.kthxty.com.cn",nocase; classtype:attempted-recon; sid:200009944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.kuaiyiya.com.cn",nocase; classtype:attempted-recon; sid:200009945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.luanzhai.com.cn",nocase; classtype:attempted-recon; sid:200009946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.mianmou.com.cn",nocase; classtype:attempted-recon; sid:200009947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.miugun.com.cn",nocase; classtype:attempted-recon; sid:200009948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.mtyttjc.com.cn",nocase; classtype:attempted-recon; sid:200009949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.nangsai.com.cn",nocase; classtype:attempted-recon; sid:200009950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.nenshuai.com.cn",nocase; classtype:attempted-recon; sid:200009951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.niaotian.com.cn",nocase; classtype:attempted-recon; sid:200009952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.noelgifts.com.cn",nocase; classtype:attempted-recon; sid:200009953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.nwew4zbf.com.cn",nocase; classtype:attempted-recon; sid:200009954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.pclearner.com.cn",nocase; classtype:attempted-recon; sid:200009955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.sar9my9m.com.cn",nocase; classtype:attempted-recon; sid:200009956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.scwz168.com.cn",nocase; classtype:attempted-recon; sid:200009957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.sikafu.com.cn",nocase; classtype:attempted-recon; sid:200009958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.tgnkuv.com.cn",nocase; classtype:attempted-recon; sid:200009959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.tjxsxs.com.cn",nocase; classtype:attempted-recon; sid:200009960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.whship.com.cn",nocase; classtype:attempted-recon; sid:200009961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.xiuzun.com.cn",nocase; classtype:attempted-recon; sid:200009962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.yo0t1fm.com.cn",nocase; classtype:attempted-recon; sid:200009963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visanew.com",nocase; classtype:attempted-recon; sid:200009964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visioncenterss.blogspot.com",nocase; classtype:attempted-recon; sid:200009965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visionproperty.in",nocase; classtype:attempted-recon; sid:200009966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visionsoptical.com",nocase; classtype:attempted-recon; sid:200009967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.chenmanqi.top",nocase; classtype:attempted-recon; sid:200009968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.rwmcr.top",nocase; classtype:attempted-recon; sid:200009969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.uvlhwb.top",nocase; classtype:attempted-recon; sid:200009970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.wiguyc.top",nocase; classtype:attempted-recon; sid:200009971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.wkbakq.top",nocase; classtype:attempted-recon; sid:200009972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.wmysah.top",nocase; classtype:attempted-recon; sid:200009973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.wotygl.top",nocase; classtype:attempted-recon; sid:200009974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.wozavw.top",nocase; classtype:attempted-recon; sid:200009975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.xfertf.top",nocase; classtype:attempted-recon; sid:200009976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.xloclk.top",nocase; classtype:attempted-recon; sid:200009977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.xovtfx.top",nocase; classtype:attempted-recon; sid:200009978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.xubnkg.top",nocase; classtype:attempted-recon; sid:200009979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.xvljph.top",nocase; classtype:attempted-recon; sid:200009980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.xvotal.top",nocase; classtype:attempted-recon; sid:200009981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.xwitwq.top",nocase; classtype:attempted-recon; sid:200009982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.ybmkwa.top",nocase; classtype:attempted-recon; sid:200009983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.ydpssl.top",nocase; classtype:attempted-recon; sid:200009984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.yfnvfr.top",nocase; classtype:attempted-recon; sid:200009985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.yfsjiq.top",nocase; classtype:attempted-recon; sid:200009986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.yqggww.top",nocase; classtype:attempted-recon; sid:200009987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.ytbspo.top",nocase; classtype:attempted-recon; sid:200009988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.yvpnxy.top",nocase; classtype:attempted-recon; sid:200009989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.yyyuwr.top",nocase; classtype:attempted-recon; sid:200009990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.yyzded.top",nocase; classtype:attempted-recon; sid:200009991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.zohlkk.top",nocase; classtype:attempted-recon; sid:200009992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.zpirok.top",nocase; classtype:attempted-recon; sid:200009993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.zrzckw.top",nocase; classtype:attempted-recon; sid:200009994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.zusrue.top",nocase; classtype:attempted-recon; sid:200009995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visordetermine1d.com",nocase; classtype:attempted-recon; sid:200009996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vitamineralshop.com",nocase; classtype:attempted-recon; sid:200009997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsvasoeon.vvsceseon.94wbag4w.com.cn",nocase; classtype:attempted-recon; sid:200009998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsvasoeon.vvsceseon.anmg61.com.cn",nocase; classtype:attempted-recon; sid:200009999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsvasoeon.vvsceseon.dz5e4pdb.com.cn",nocase; classtype:attempted-recon; sid:200010000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsvasoeon.vvsceseon.lyrlzy.com.cn",nocase; classtype:attempted-recon; sid:200010001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcsvasoeon.vvsceseon.vyiqjfc.com.cn",nocase; classtype:attempted-recon; sid:200010002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.0571ol.com.cn",nocase; classtype:attempted-recon; sid:200010003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.07jmpe0s.com.cn",nocase; classtype:attempted-recon; sid:200010004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.18wyrcyp.com.cn",nocase; classtype:attempted-recon; sid:200010005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.1mzrwj4k.com.cn",nocase; classtype:attempted-recon; sid:200010006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.21vita.com.cn",nocase; classtype:attempted-recon; sid:200010007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.2ywg0lcs.com.cn",nocase; classtype:attempted-recon; sid:200010008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.48irel3a.com.cn",nocase; classtype:attempted-recon; sid:200010009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.4f8ajk5a.com.cn",nocase; classtype:attempted-recon; sid:200010010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.4hnm1gsc.com.cn",nocase; classtype:attempted-recon; sid:200010011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.52maodzw.com.cn",nocase; classtype:attempted-recon; sid:200010012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.59dtjai0.com.cn",nocase; classtype:attempted-recon; sid:200010013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.5jknac7k.com.cn",nocase; classtype:attempted-recon; sid:200010014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.668trip.com.cn",nocase; classtype:attempted-recon; sid:200010015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.70rbpel8.com.cn",nocase; classtype:attempted-recon; sid:200010016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.8gdwi7g8.com.cn",nocase; classtype:attempted-recon; sid:200010017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.8z65bngs.com.cn",nocase; classtype:attempted-recon; sid:200010018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.9hks0gzd.com.cn",nocase; classtype:attempted-recon; sid:200010019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.9t80yk5l.com.cn",nocase; classtype:attempted-recon; sid:200010020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.aahrsk.com.cn",nocase; classtype:attempted-recon; sid:200010021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.abraxas.com.cn",nocase; classtype:attempted-recon; sid:200010022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.ainijun.com.cn",nocase; classtype:attempted-recon; sid:200010023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.almegc5p.com.cn",nocase; classtype:attempted-recon; sid:200010024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.annrdzd.com.cn",nocase; classtype:attempted-recon; sid:200010025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.bjbyby.com.cn",nocase; classtype:attempted-recon; sid:200010026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.byukumg.com.cn",nocase; classtype:attempted-recon; sid:200010027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.bztfylsb.com.cn",nocase; classtype:attempted-recon; sid:200010028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.c8mnem0w.com.cn",nocase; classtype:attempted-recon; sid:200010029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.ccrvpd.com.cn",nocase; classtype:attempted-recon; sid:200010030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.cengkuo.com.cn",nocase; classtype:attempted-recon; sid:200010031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.cengzhe.com.cn",nocase; classtype:attempted-recon; sid:200010032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.cenhuan.com.cn",nocase; classtype:attempted-recon; sid:200010033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.centong.com.cn",nocase; classtype:attempted-recon; sid:200010034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.chakua.com.cn",nocase; classtype:attempted-recon; sid:200010035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.cshy168.com.cn",nocase; classtype:attempted-recon; sid:200010036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.d7rspbam.com.cn",nocase; classtype:attempted-recon; sid:200010037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.designyourconcrete.com.cn",nocase; classtype:attempted-recon; sid:200010038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.deweng.com.cn",nocase; classtype:attempted-recon; sid:200010039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.dmapjlnk.com.cn",nocase; classtype:attempted-recon; sid:200010040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.double-e.com.cn",nocase; classtype:attempted-recon; sid:200010041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.duiyao.com.cn",nocase; classtype:attempted-recon; sid:200010042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.dunhei.com.cn",nocase; classtype:attempted-recon; sid:200010043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.duozhua.com.cn",nocase; classtype:attempted-recon; sid:200010044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.ectmj7b.com.cn",nocase; classtype:attempted-recon; sid:200010045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.enmedj.com.cn",nocase; classtype:attempted-recon; sid:200010046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.epw7b8gn.com.cn",nocase; classtype:attempted-recon; sid:200010047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.ewmamomf.com.cn",nocase; classtype:attempted-recon; sid:200010048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.fad7hdw.com.cn",nocase; classtype:attempted-recon; sid:200010049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.feikuan.com.cn",nocase; classtype:attempted-recon; sid:200010050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.flintcg.com.cn",nocase; classtype:attempted-recon; sid:200010051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.foucang.com.cn",nocase; classtype:attempted-recon; sid:200010052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.fouguo.com.cn",nocase; classtype:attempted-recon; sid:200010053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.fsibiu.com.cn",nocase; classtype:attempted-recon; sid:200010054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.fwjl0cr.com.cn",nocase; classtype:attempted-recon; sid:200010055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.gainiao.com.cn",nocase; classtype:attempted-recon; sid:200010056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.gaofugolf.com.cn",nocase; classtype:attempted-recon; sid:200010057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.goldbeach.com.cn",nocase; classtype:attempted-recon; sid:200010058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.guangtun.com.cn",nocase; classtype:attempted-recon; sid:200010059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.guisao.com.cn",nocase; classtype:attempted-recon; sid:200010060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.gwkjyk.com.cn",nocase; classtype:attempted-recon; sid:200010061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.h980fg34.com.cn",nocase; classtype:attempted-recon; sid:200010062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.hencang.com.cn",nocase; classtype:attempted-recon; sid:200010063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.hensuo.com.cn",nocase; classtype:attempted-recon; sid:200010064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.huaiduan.com.cn",nocase; classtype:attempted-recon; sid:200010065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.huanan-wm.com.cn",nocase; classtype:attempted-recon; sid:200010066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.hubpen.com.cn",nocase; classtype:attempted-recon; sid:200010067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.i-law.com.cn",nocase; classtype:attempted-recon; sid:200010068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.ifysdvf.com.cn",nocase; classtype:attempted-recon; sid:200010069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.jdvmaa.com.cn",nocase; classtype:attempted-recon; sid:200010070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.jionglv.com.cn",nocase; classtype:attempted-recon; sid:200010071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.jirk0sh.com.cn",nocase; classtype:attempted-recon; sid:200010072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.jiuchui.com.cn",nocase; classtype:attempted-recon; sid:200010073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.jmwrlfp7.com.cn",nocase; classtype:attempted-recon; sid:200010074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.kangzu.com.cn",nocase; classtype:attempted-recon; sid:200010075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.kararar.com.cn",nocase; classtype:attempted-recon; sid:200010076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.kayumanis.com.cn",nocase; classtype:attempted-recon; sid:200010077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.kesang.com.cn",nocase; classtype:attempted-recon; sid:200010078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.km-senge.com.cn",nocase; classtype:attempted-recon; sid:200010079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.krfocm97.com.cn",nocase; classtype:attempted-recon; sid:200010080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.kszcmcw2.com.cn",nocase; classtype:attempted-recon; sid:200010081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.ktl4a1yd.com.cn",nocase; classtype:attempted-recon; sid:200010082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.langhei.com.cn",nocase; classtype:attempted-recon; sid:200010083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.lijun99.com.cn",nocase; classtype:attempted-recon; sid:200010084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.lkblog.com.cn",nocase; classtype:attempted-recon; sid:200010085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.longbroad.com.cn",nocase; classtype:attempted-recon; sid:200010086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.longlia.com.cn",nocase; classtype:attempted-recon; sid:200010087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.longnai.com.cn",nocase; classtype:attempted-recon; sid:200010088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.ludrus.com.cn",nocase; classtype:attempted-recon; sid:200010089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.lunluan.com.cn",nocase; classtype:attempted-recon; sid:200010090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.m15m7jfb.com.cn",nocase; classtype:attempted-recon; sid:200010091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.maozhui.com.cn",nocase; classtype:attempted-recon; sid:200010092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.midea-sz.com.cn",nocase; classtype:attempted-recon; sid:200010093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.miningcn.com.cn",nocase; classtype:attempted-recon; sid:200010094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.missjto.com.cn",nocase; classtype:attempted-recon; sid:200010095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.miuhua.com.cn",nocase; classtype:attempted-recon; sid:200010096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.moomail.com.cn",nocase; classtype:attempted-recon; sid:200010097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.moushu.com.cn",nocase; classtype:attempted-recon; sid:200010098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.music98.com.cn",nocase; classtype:attempted-recon; sid:200010099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.n97wf6m.com.cn",nocase; classtype:attempted-recon; sid:200010100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.neatec.com.cn",nocase; classtype:attempted-recon; sid:200010101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.nengzhuo.com.cn",nocase; classtype:attempted-recon; sid:200010102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.nentian.com.cn",nocase; classtype:attempted-recon; sid:200010103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.njca5dzj.com.cn",nocase; classtype:attempted-recon; sid:200010104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.offlady.com.cn",nocase; classtype:attempted-recon; sid:200010105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.p8b9ge4a.com.cn",nocase; classtype:attempted-recon; sid:200010106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.phdisy21.com.cn",nocase; classtype:attempted-recon; sid:200010107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.pujinb5.com.cn",nocase; classtype:attempted-recon; sid:200010108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.qiachang.com.cn",nocase; classtype:attempted-recon; sid:200010109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.ruitiao.com.cn",nocase; classtype:attempted-recon; sid:200010110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.ruzhun.com.cn",nocase; classtype:attempted-recon; sid:200010111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.s04amnw.com.cn",nocase; classtype:attempted-recon; sid:200010112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.sgmbtwri.com.cn",nocase; classtype:attempted-recon; sid:200010113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.sharang.com.cn",nocase; classtype:attempted-recon; sid:200010114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.shhdbjgs.com.cn",nocase; classtype:attempted-recon; sid:200010115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.shruikun.com.cn",nocase; classtype:attempted-recon; sid:200010116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.shsiwei.com.cn",nocase; classtype:attempted-recon; sid:200010117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.sof8d4a5.com.cn",nocase; classtype:attempted-recon; sid:200010118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.suiqiong.com.cn",nocase; classtype:attempted-recon; sid:200010119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.suny365.com.cn",nocase; classtype:attempted-recon; sid:200010120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.taotaomu.com.cn",nocase; classtype:attempted-recon; sid:200010121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.tguoyinbo.com.cn",nocase; classtype:attempted-recon; sid:200010122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.triesshop.com.cn",nocase; classtype:attempted-recon; sid:200010123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.zglyjzl.com.cn",nocase; classtype:attempted-recon; sid:200010124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.zuohuai.com.cn",nocase; classtype:attempted-recon; sid:200010125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivscsoei.xabtnox.presse.ci",nocase; classtype:attempted-recon; sid:200010126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.rgiclw.top",nocase; classtype:attempted-recon; sid:200010127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.rlyndd.top",nocase; classtype:attempted-recon; sid:200010128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.roiysf.top",nocase; classtype:attempted-recon; sid:200010129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.rtpmvr.top",nocase; classtype:attempted-recon; sid:200010130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.rusnrh.top",nocase; classtype:attempted-recon; sid:200010131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.rwgjyb.top",nocase; classtype:attempted-recon; sid:200010132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.rxiarn.top",nocase; classtype:attempted-recon; sid:200010133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.tglthh.top",nocase; classtype:attempted-recon; sid:200010134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.tkozlg.top",nocase; classtype:attempted-recon; sid:200010135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.tsqcxg.top",nocase; classtype:attempted-recon; sid:200010136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.tvqwui.top",nocase; classtype:attempted-recon; sid:200010137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.twjzsc.top",nocase; classtype:attempted-recon; sid:200010138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.txvcqg.top",nocase; classtype:attempted-recon; sid:200010139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.txwlxg.top",nocase; classtype:attempted-recon; sid:200010140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.tzmndc.top",nocase; classtype:attempted-recon; sid:200010141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.uasxxj.top",nocase; classtype:attempted-recon; sid:200010142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.uijamm.top",nocase; classtype:attempted-recon; sid:200010143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.updcan.top",nocase; classtype:attempted-recon; sid:200010144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.uxhejc.top",nocase; classtype:attempted-recon; sid:200010145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.uzegyc.top",nocase; classtype:attempted-recon; sid:200010146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.wdzxnt.top",nocase; classtype:attempted-recon; sid:200010147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsecsosein.vvseaaiaseon.webyzs.top",nocase; classtype:attempted-recon; sid:200010148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.rcapss.top",nocase; classtype:attempted-recon; sid:200010149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.rgiclw.top",nocase; classtype:attempted-recon; sid:200010150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.rhxhhg.top",nocase; classtype:attempted-recon; sid:200010151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.rjnqxp.top",nocase; classtype:attempted-recon; sid:200010152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.rlyndd.top",nocase; classtype:attempted-recon; sid:200010153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.rusnrh.top",nocase; classtype:attempted-recon; sid:200010154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.tciheh.top",nocase; classtype:attempted-recon; sid:200010155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.tqsnfg.top",nocase; classtype:attempted-recon; sid:200010156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.tsqcxg.top",nocase; classtype:attempted-recon; sid:200010157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.tvqwui.top",nocase; classtype:attempted-recon; sid:200010158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.twjzsc.top",nocase; classtype:attempted-recon; sid:200010159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.txvcqg.top",nocase; classtype:attempted-recon; sid:200010160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.txwlxg.top",nocase; classtype:attempted-recon; sid:200010161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.uudnmz.top",nocase; classtype:attempted-recon; sid:200010162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.uxhejc.top",nocase; classtype:attempted-recon; sid:200010163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseosein.vvsaiaseon.vaylqb.top",nocase; classtype:attempted-recon; sid:200010164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesecsosein.vvssaeaaiaseon.rhxhhg.top",nocase; classtype:attempted-recon; sid:200010165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesecsosein.vvssaeaaiaseon.scrqdb.top",nocase; classtype:attempted-recon; sid:200010166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesecsosein.vvssaeaaiaseon.sscssr.top",nocase; classtype:attempted-recon; sid:200010167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesecsosein.vvssaeaaiaseon.trxpth.top",nocase; classtype:attempted-recon; sid:200010168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesecsosein.vvssaeaaiaseon.tvqwui.top",nocase; classtype:attempted-recon; sid:200010169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesecsosein.vvssaeaaiaseon.twjzsc.top",nocase; classtype:attempted-recon; sid:200010170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesecsosein.vvssaeaaiaseon.txwlxg.top",nocase; classtype:attempted-recon; sid:200010171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsesecsosein.vvssaeaaiaseon.tzmndc.top",nocase; classtype:attempted-recon; sid:200010172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.rcapss.top",nocase; classtype:attempted-recon; sid:200010173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.rwgjyb.top",nocase; classtype:attempted-recon; sid:200010174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.sgsgyb.top",nocase; classtype:attempted-recon; sid:200010175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.tglthh.top",nocase; classtype:attempted-recon; sid:200010176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.tkozlg.top",nocase; classtype:attempted-recon; sid:200010177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.tqeeuz.top",nocase; classtype:attempted-recon; sid:200010178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.tqsnfg.top",nocase; classtype:attempted-recon; sid:200010179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.tsqcxg.top",nocase; classtype:attempted-recon; sid:200010180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.twjzsc.top",nocase; classtype:attempted-recon; sid:200010181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.txxbks.top",nocase; classtype:attempted-recon; sid:200010182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.uijamm.top",nocase; classtype:attempted-recon; sid:200010183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.upjhye.top",nocase; classtype:attempted-recon; sid:200010184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.uviayc.top",nocase; classtype:attempted-recon; sid:200010185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.vaylqb.top",nocase; classtype:attempted-recon; sid:200010186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivseseosein.vvsaisaaseon.webyzs.top",nocase; classtype:attempted-recon; sid:200010187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.020jeans.com.cn",nocase; classtype:attempted-recon; sid:200010188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.0571ol.com.cn",nocase; classtype:attempted-recon; sid:200010189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.173mir.com.cn",nocase; classtype:attempted-recon; sid:200010190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.1gpmre27.com.cn",nocase; classtype:attempted-recon; sid:200010191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.2ywg0lcs.com.cn",nocase; classtype:attempted-recon; sid:200010192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.4hnm1gsc.com.cn",nocase; classtype:attempted-recon; sid:200010193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.52maodzw.com.cn",nocase; classtype:attempted-recon; sid:200010194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.59dtjai0.com.cn",nocase; classtype:attempted-recon; sid:200010195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.5d7n8ca.com.cn",nocase; classtype:attempted-recon; sid:200010196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.5fj8w6dw.com.cn",nocase; classtype:attempted-recon; sid:200010197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.5igold.com.cn",nocase; classtype:attempted-recon; sid:200010198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.5jknac7k.com.cn",nocase; classtype:attempted-recon; sid:200010199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.5p6me2m6.com.cn",nocase; classtype:attempted-recon; sid:200010200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.6arjako6.com.cn",nocase; classtype:attempted-recon; sid:200010201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.82cm90eo.com.cn",nocase; classtype:attempted-recon; sid:200010202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.8gdwi7g8.com.cn",nocase; classtype:attempted-recon; sid:200010203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.8z65bngs.com.cn",nocase; classtype:attempted-recon; sid:200010204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.91boche.com.cn",nocase; classtype:attempted-recon; sid:200010205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.9daai63a.com.cn",nocase; classtype:attempted-recon; sid:200010206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.9t80yk5l.com.cn",nocase; classtype:attempted-recon; sid:200010207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.aahrsk.com.cn",nocase; classtype:attempted-recon; sid:200010208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.abraxas.com.cn",nocase; classtype:attempted-recon; sid:200010209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.ahkusa.com.cn",nocase; classtype:attempted-recon; sid:200010210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.ainijun.com.cn",nocase; classtype:attempted-recon; sid:200010211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.annrdzd.com.cn",nocase; classtype:attempted-recon; sid:200010212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.ansystem.com.cn",nocase; classtype:attempted-recon; sid:200010213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.aqh27.com.cn",nocase; classtype:attempted-recon; sid:200010214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.artlong.com.cn",nocase; classtype:attempted-recon; sid:200010215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.banglia.com.cn",nocase; classtype:attempted-recon; sid:200010216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.bengchen.com.cn",nocase; classtype:attempted-recon; sid:200010217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.bjbyby.com.cn",nocase; classtype:attempted-recon; sid:200010218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.byukumg.com.cn",nocase; classtype:attempted-recon; sid:200010219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.bztfylsb.com.cn",nocase; classtype:attempted-recon; sid:200010220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.c5w9lsk7.com.cn",nocase; classtype:attempted-recon; sid:200010221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.cangceng.com.cn",nocase; classtype:attempted-recon; sid:200010222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.caorao.com.cn",nocase; classtype:attempted-recon; sid:200010223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.cengzhe.com.cn",nocase; classtype:attempted-recon; sid:200010224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.cengzheng.com.cn",nocase; classtype:attempted-recon; sid:200010225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.chakua.com.cn",nocase; classtype:attempted-recon; sid:200010226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.chuandou.com.cn",nocase; classtype:attempted-recon; sid:200010227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.chunou.com.cn",nocase; classtype:attempted-recon; sid:200010228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.cocopos.com.cn",nocase; classtype:attempted-recon; sid:200010229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.cshy168.com.cn",nocase; classtype:attempted-recon; sid:200010230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.d7rspbam.com.cn",nocase; classtype:attempted-recon; sid:200010231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.designyourconcrete.com.cn",nocase; classtype:attempted-recon; sid:200010232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.deweng.com.cn",nocase; classtype:attempted-recon; sid:200010233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.djblcbay.com.cn",nocase; classtype:attempted-recon; sid:200010234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.double-e.com.cn",nocase; classtype:attempted-recon; sid:200010235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.duiyao.com.cn",nocase; classtype:attempted-recon; sid:200010236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.dunhei.com.cn",nocase; classtype:attempted-recon; sid:200010237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.duozhua.com.cn",nocase; classtype:attempted-recon; sid:200010238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.elj0kcaw.com.cn",nocase; classtype:attempted-recon; sid:200010239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.enmedj.com.cn",nocase; classtype:attempted-recon; sid:200010240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.epw7b8gn.com.cn",nocase; classtype:attempted-recon; sid:200010241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.ez0ydrzw.com.cn",nocase; classtype:attempted-recon; sid:200010242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.fangpen.com.cn",nocase; classtype:attempted-recon; sid:200010243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.fohuang.com.cn",nocase; classtype:attempted-recon; sid:200010244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.foucang.com.cn",nocase; classtype:attempted-recon; sid:200010245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.fouguo.com.cn",nocase; classtype:attempted-recon; sid:200010246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.fsibiu.com.cn",nocase; classtype:attempted-recon; sid:200010247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.fwjl0cr.com.cn",nocase; classtype:attempted-recon; sid:200010248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.gainiao.com.cn",nocase; classtype:attempted-recon; sid:200010249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.gaofugolf.com.cn",nocase; classtype:attempted-recon; sid:200010250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.gtzrgd.com.cn",nocase; classtype:attempted-recon; sid:200010251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.guisao.com.cn",nocase; classtype:attempted-recon; sid:200010252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.guizai.com.cn",nocase; classtype:attempted-recon; sid:200010253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.guxinwang.com.cn",nocase; classtype:attempted-recon; sid:200010254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.h980fg34.com.cn",nocase; classtype:attempted-recon; sid:200010255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.hbccmy.com.cn",nocase; classtype:attempted-recon; sid:200010256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.hencang.com.cn",nocase; classtype:attempted-recon; sid:200010257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.hensuo.com.cn",nocase; classtype:attempted-recon; sid:200010258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.her-story.com.cn",nocase; classtype:attempted-recon; sid:200010259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.huaiga.com.cn",nocase; classtype:attempted-recon; sid:200010260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.huangcui.com.cn",nocase; classtype:attempted-recon; sid:200010261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.huangqu.com.cn",nocase; classtype:attempted-recon; sid:200010262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.hznami.com.cn",nocase; classtype:attempted-recon; sid:200010263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.iak8co0w.com.cn",nocase; classtype:attempted-recon; sid:200010264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.jiangzhua.com.cn",nocase; classtype:attempted-recon; sid:200010265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.jianlue.com.cn",nocase; classtype:attempted-recon; sid:200010266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.jielue.com.cn",nocase; classtype:attempted-recon; sid:200010267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.jmwrlfp7.com.cn",nocase; classtype:attempted-recon; sid:200010268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.jngwkhs.com.cn",nocase; classtype:attempted-recon; sid:200010269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.juncui.com.cn",nocase; classtype:attempted-recon; sid:200010270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.juyuangs.com.cn",nocase; classtype:attempted-recon; sid:200010271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.kahbyew.com.cn",nocase; classtype:attempted-recon; sid:200010272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.kararar.com.cn",nocase; classtype:attempted-recon; sid:200010273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.kfs119.com.cn",nocase; classtype:attempted-recon; sid:200010274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.km-senge.com.cn",nocase; classtype:attempted-recon; sid:200010275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.konggan.com.cn",nocase; classtype:attempted-recon; sid:200010276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.kongze.com.cn",nocase; classtype:attempted-recon; sid:200010277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.koyosha.com.cn",nocase; classtype:attempted-recon; sid:200010278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.krfocm97.com.cn",nocase; classtype:attempted-recon; sid:200010279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.ktl4a1yd.com.cn",nocase; classtype:attempted-recon; sid:200010280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.l091ezsp.com.cn",nocase; classtype:attempted-recon; sid:200010281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.labie.com.cn",nocase; classtype:attempted-recon; sid:200010282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.lhanivo.com.cn",nocase; classtype:attempted-recon; sid:200010283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.lijun99.com.cn",nocase; classtype:attempted-recon; sid:200010284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.litoyes.com.cn",nocase; classtype:attempted-recon; sid:200010285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.longbroad.com.cn",nocase; classtype:attempted-recon; sid:200010286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.longlia.com.cn",nocase; classtype:attempted-recon; sid:200010287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.longnai.com.cn",nocase; classtype:attempted-recon; sid:200010288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.m15m7jfb.com.cn",nocase; classtype:attempted-recon; sid:200010289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.mb9tolcw.com.cn",nocase; classtype:attempted-recon; sid:200010290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.mengstar.com.cn",nocase; classtype:attempted-recon; sid:200010291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.midea-sz.com.cn",nocase; classtype:attempted-recon; sid:200010292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.miningcn.com.cn",nocase; classtype:attempted-recon; sid:200010293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.moushu.com.cn",nocase; classtype:attempted-recon; sid:200010294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.mouxsgi.com.cn",nocase; classtype:attempted-recon; sid:200010295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.msah4a45.com.cn",nocase; classtype:attempted-recon; sid:200010296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.music98.com.cn",nocase; classtype:attempted-recon; sid:200010297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.nakm6sc2.com.cn",nocase; classtype:attempted-recon; sid:200010298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.neatec.com.cn",nocase; classtype:attempted-recon; sid:200010299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.nengzhuo.com.cn",nocase; classtype:attempted-recon; sid:200010300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.nenmiu.com.cn",nocase; classtype:attempted-recon; sid:200010301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.nentian.com.cn",nocase; classtype:attempted-recon; sid:200010302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.newbaron.com.cn",nocase; classtype:attempted-recon; sid:200010303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.niaohong.com.cn",nocase; classtype:attempted-recon; sid:200010304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.niushuan.com.cn",nocase; classtype:attempted-recon; sid:200010305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.njca5dzj.com.cn",nocase; classtype:attempted-recon; sid:200010306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.offlady.com.cn",nocase; classtype:attempted-recon; sid:200010307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.p8b9ge4a.com.cn",nocase; classtype:attempted-recon; sid:200010308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.pianxia.com.cn",nocase; classtype:attempted-recon; sid:200010309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.pl0kyjcz.com.cn",nocase; classtype:attempted-recon; sid:200010310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.pujinb5.com.cn",nocase; classtype:attempted-recon; sid:200010311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.qddongye.com.cn",nocase; classtype:attempted-recon; sid:200010312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.rochemall.com.cn",nocase; classtype:attempted-recon; sid:200010313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.ruodiangc.com.cn",nocase; classtype:attempted-recon; sid:200010314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.s6awj4ga.com.cn",nocase; classtype:attempted-recon; sid:200010315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.sgmbtwri.com.cn",nocase; classtype:attempted-recon; sid:200010316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.smgjl20g.com.cn",nocase; classtype:attempted-recon; sid:200010317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.sof8d4a5.com.cn",nocase; classtype:attempted-recon; sid:200010318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.suny365.com.cn",nocase; classtype:attempted-recon; sid:200010319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.syslynk.com.cn",nocase; classtype:attempted-recon; sid:200010320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.taotaomu.com.cn",nocase; classtype:attempted-recon; sid:200010321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.tb6nesmd.com.cn",nocase; classtype:attempted-recon; sid:200010322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.tj-wy.com.cn",nocase; classtype:attempted-recon; sid:200010323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.tnvtgb.com.cn",nocase; classtype:attempted-recon; sid:200010324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.toupang.com.cn",nocase; classtype:attempted-recon; sid:200010325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.toyokuni.com.cn",nocase; classtype:attempted-recon; sid:200010326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.triesshop.com.cn",nocase; classtype:attempted-recon; sid:200010327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.tvjpam.com.cn",nocase; classtype:attempted-recon; sid:200010328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.twlcsa95.com.cn",nocase; classtype:attempted-recon; sid:200010329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.vtugoel.com.cn",nocase; classtype:attempted-recon; sid:200010330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.whhyyy.com.cn",nocase; classtype:attempted-recon; sid:200010331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.wjdieib.com.cn",nocase; classtype:attempted-recon; sid:200010332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.wrjhcge.com.cn",nocase; classtype:attempted-recon; sid:200010333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.wuaqrd.com.cn",nocase; classtype:attempted-recon; sid:200010334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.wxznjj.com.cn",nocase; classtype:attempted-recon; sid:200010335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.x-heater.com.cn",nocase; classtype:attempted-recon; sid:200010336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.xkdibq.com.cn",nocase; classtype:attempted-recon; sid:200010337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.xuanwai.com.cn",nocase; classtype:attempted-recon; sid:200010338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.xvpkcx.com.cn",nocase; classtype:attempted-recon; sid:200010339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.y07gfknc.com.cn",nocase; classtype:attempted-recon; sid:200010340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.yangsuo.com.cn",nocase; classtype:attempted-recon; sid:200010341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.zhaizhang.com.cn",nocase; classtype:attempted-recon; sid:200010342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.zhaopang.com.cn",nocase; classtype:attempted-recon; sid:200010343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.0wmh288g.com.cn",nocase; classtype:attempted-recon; sid:200010344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.277500.com.cn",nocase; classtype:attempted-recon; sid:200010345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.2980415.com.cn",nocase; classtype:attempted-recon; sid:200010346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.5o0kizr5.com.cn",nocase; classtype:attempted-recon; sid:200010347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.687feyac.com.cn",nocase; classtype:attempted-recon; sid:200010348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.6tb80w1j.com.cn",nocase; classtype:attempted-recon; sid:200010349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.9orehdww.com.cn",nocase; classtype:attempted-recon; sid:200010350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.anmg94.com.cn",nocase; classtype:attempted-recon; sid:200010351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.bp9ryipa.com.cn",nocase; classtype:attempted-recon; sid:200010352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.bqeejd.com.cn",nocase; classtype:attempted-recon; sid:200010353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.cannmedia.com.cn",nocase; classtype:attempted-recon; sid:200010354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.cechuan.com.cn",nocase; classtype:attempted-recon; sid:200010355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.cengting.com.cn",nocase; classtype:attempted-recon; sid:200010356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.cengtong.com.cn",nocase; classtype:attempted-recon; sid:200010357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.congdui.com.cn",nocase; classtype:attempted-recon; sid:200010358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.coulun.com.cn",nocase; classtype:attempted-recon; sid:200010359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.dgrunding.com.cn",nocase; classtype:attempted-recon; sid:200010360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.dh-hm.com.cn",nocase; classtype:attempted-recon; sid:200010361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.diandianbei.com.cn",nocase; classtype:attempted-recon; sid:200010362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.dinisi.com.cn",nocase; classtype:attempted-recon; sid:200010363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.dp9r15i8.com.cn",nocase; classtype:attempted-recon; sid:200010364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.duirang.com.cn",nocase; classtype:attempted-recon; sid:200010365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.f1emc51l.com.cn",nocase; classtype:attempted-recon; sid:200010366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.fousong.com.cn",nocase; classtype:attempted-recon; sid:200010367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.gtm-m.com.cn",nocase; classtype:attempted-recon; sid:200010368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.guaian.com.cn",nocase; classtype:attempted-recon; sid:200010369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.hansor6.com.cn",nocase; classtype:attempted-recon; sid:200010370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.haotupian.com.cn",nocase; classtype:attempted-recon; sid:200010371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.jiongbing.com.cn",nocase; classtype:attempted-recon; sid:200010372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.jionglai.com.cn",nocase; classtype:attempted-recon; sid:200010373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.jiongruan.com.cn",nocase; classtype:attempted-recon; sid:200010374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.kljwater.com.cn",nocase; classtype:attempted-recon; sid:200010375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.lhz9r6pc.com.cn",nocase; classtype:attempted-recon; sid:200010376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.liuyan068.com.cn",nocase; classtype:attempted-recon; sid:200010377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.luanyi.com.cn",nocase; classtype:attempted-recon; sid:200010378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.lunsuo.com.cn",nocase; classtype:attempted-recon; sid:200010379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.meiyaofz.com.cn",nocase; classtype:attempted-recon; sid:200010380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.motomods.com.cn",nocase; classtype:attempted-recon; sid:200010381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.naofang.com.cn",nocase; classtype:attempted-recon; sid:200010382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.niaoguang.com.cn",nocase; classtype:attempted-recon; sid:200010383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.njhccc.com.cn",nocase; classtype:attempted-recon; sid:200010384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.pengdiu.com.cn",nocase; classtype:attempted-recon; sid:200010385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.qiangdie.com.cn",nocase; classtype:attempted-recon; sid:200010386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.rcwhmlc.com.cn",nocase; classtype:attempted-recon; sid:200010387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.shaw0m6h.com.cn",nocase; classtype:attempted-recon; sid:200010388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.shuashao.com.cn",nocase; classtype:attempted-recon; sid:200010389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.shuazhui.com.cn",nocase; classtype:attempted-recon; sid:200010390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.sochang.com.cn",nocase; classtype:attempted-recon; sid:200010391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.sz-yitong.com.cn",nocase; classtype:attempted-recon; sid:200010392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.townsky.com.cn",nocase; classtype:attempted-recon; sid:200010393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.xrzhvd.com.cn",nocase; classtype:attempted-recon; sid:200010394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.yahoo3721.com.cn",nocase; classtype:attempted-recon; sid:200010395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.zhankeng.com.cn",nocase; classtype:attempted-recon; sid:200010396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.06cmncai.com.cn",nocase; classtype:attempted-recon; sid:200010397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.1hkwatas.com.cn",nocase; classtype:attempted-recon; sid:200010398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.5918wz.com.cn",nocase; classtype:attempted-recon; sid:200010399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.6tdm5m06.com.cn",nocase; classtype:attempted-recon; sid:200010400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.aomenhua.com.cn",nocase; classtype:attempted-recon; sid:200010401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.c5bnappc.com.cn",nocase; classtype:attempted-recon; sid:200010402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.cansuan.com.cn",nocase; classtype:attempted-recon; sid:200010403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.catk27bl.com.cn",nocase; classtype:attempted-recon; sid:200010404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.cz-dk.com.cn",nocase; classtype:attempted-recon; sid:200010405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.dalianmei.com.cn",nocase; classtype:attempted-recon; sid:200010406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.f1mdeaia.com.cn",nocase; classtype:attempted-recon; sid:200010407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.fczytv.com.cn",nocase; classtype:attempted-recon; sid:200010408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.fengkehui.com.cn",nocase; classtype:attempted-recon; sid:200010409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.founty.com.cn",nocase; classtype:attempted-recon; sid:200010410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.fw6yg0a.com.cn",nocase; classtype:attempted-recon; sid:200010411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.gangnin.com.cn",nocase; classtype:attempted-recon; sid:200010412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.gapang.com.cn",nocase; classtype:attempted-recon; sid:200010413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.guaichao.com.cn",nocase; classtype:attempted-recon; sid:200010414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.h2mdrb92.com.cn",nocase; classtype:attempted-recon; sid:200010415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.handier.com.cn",nocase; classtype:attempted-recon; sid:200010416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.hangchong.com.cn",nocase; classtype:attempted-recon; sid:200010417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.hblongtu.com.cn",nocase; classtype:attempted-recon; sid:200010418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.huaisuo.com.cn",nocase; classtype:attempted-recon; sid:200010419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.huzhun.com.cn",nocase; classtype:attempted-recon; sid:200010420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.igtfvr.com.cn",nocase; classtype:attempted-recon; sid:200010421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.ip2008.com.cn",nocase; classtype:attempted-recon; sid:200010422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.jiongban.com.cn",nocase; classtype:attempted-recon; sid:200010423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.kairao.com.cn",nocase; classtype:attempted-recon; sid:200010424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.kenteer.com.cn",nocase; classtype:attempted-recon; sid:200010425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.kidsshoes.com.cn",nocase; classtype:attempted-recon; sid:200010426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.lkdm484h.com.cn",nocase; classtype:attempted-recon; sid:200010427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.luanzhai.com.cn",nocase; classtype:attempted-recon; sid:200010428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.luqiong.com.cn",nocase; classtype:attempted-recon; sid:200010429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.mianmou.com.cn",nocase; classtype:attempted-recon; sid:200010430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.minshao.com.cn",nocase; classtype:attempted-recon; sid:200010431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.mnt8amg.com.cn",nocase; classtype:attempted-recon; sid:200010432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.nangsai.com.cn",nocase; classtype:attempted-recon; sid:200010433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.nenshuai.com.cn",nocase; classtype:attempted-recon; sid:200010434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.noelgifts.com.cn",nocase; classtype:attempted-recon; sid:200010435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.nrxeeee.com.cn",nocase; classtype:attempted-recon; sid:200010436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.o792mwbf.com.cn",nocase; classtype:attempted-recon; sid:200010437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.sholay.com.cn",nocase; classtype:attempted-recon; sid:200010438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.sikafu.com.cn",nocase; classtype:attempted-recon; sid:200010439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.tgnkuv.com.cn",nocase; classtype:attempted-recon; sid:200010440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.xiuqia.com.cn",nocase; classtype:attempted-recon; sid:200010441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.xiuzun.com.cn",nocase; classtype:attempted-recon; sid:200010442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.yaopiao.com.cn",nocase; classtype:attempted-recon; sid:200010443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.yasndwjz.com.cn",nocase; classtype:attempted-recon; sid:200010444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.yo0t1fm.com.cn",nocase; classtype:attempted-recon; sid:200010445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.ywajpk7e.com.cn",nocase; classtype:attempted-recon; sid:200010446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivvisasein.nooshrz.asso.ci",nocase; classtype:attempted-recon; sid:200010447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivvisasein.vlnlgbs.asso.ci",nocase; classtype:attempted-recon; sid:200010448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkmatka.in",nocase; classtype:attempted-recon; sid:200010449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vkontakte.app",nocase; classtype:attempted-recon; sid:200010450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vlnted-polska.order2231021.shop",nocase; classtype:attempted-recon; sid:200010451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vlnted-polska.orders301291210.xyz",nocase; classtype:attempted-recon; sid:200010452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vlnted.pl-id0726491.buzz",nocase; classtype:attempted-recon; sid:200010453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vlogin02-web0mail-ece23043.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vm26012022.s3.fr-par.scw.cloud",nocase; classtype:attempted-recon; sid:200010455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vn0er89vg-w3reh-vbn-w0rehbgv-whebnv-9rgv.obs.ap-southeast-1.myhuaweicloud.com",nocase; classtype:attempted-recon; sid:200010456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vnchywypwr.duckdns.org",nocase; classtype:attempted-recon; sid:200010457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vodaupdatepayment.com",nocase; classtype:attempted-recon; sid:200010458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"voiceacademy.international",nocase; classtype:attempted-recon; sid:200010459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"voicee10.weebly.com",nocase; classtype:attempted-recon; sid:200010460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"volks-idbank.web.app",nocase; classtype:attempted-recon; sid:200010461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"volks-vb-id.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"volks-vb-id.web.app",nocase; classtype:attempted-recon; sid:200010463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"volvocarskc.us1.list-manage.com",nocase; classtype:attempted-recon; sid:200010464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vouchere-astrazeneca.totemsoftware.ro",nocase; classtype:attempted-recon; sid:200010465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vroptaq.top",nocase; classtype:attempted-recon; sid:200010466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsdhjfdbvf-bmobankingonline-bvgryru.weebly.com",nocase; classtype:attempted-recon; sid:200010467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.0jw7a4gy.com.cn",nocase; classtype:attempted-recon; sid:200010468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.1510lpw.com.cn",nocase; classtype:attempted-recon; sid:200010469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.1jiajia.com.cn",nocase; classtype:attempted-recon; sid:200010470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.1pmc6awo.com.cn",nocase; classtype:attempted-recon; sid:200010471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.2009mp3.com.cn",nocase; classtype:attempted-recon; sid:200010472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.258448.com.cn",nocase; classtype:attempted-recon; sid:200010473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.2rml4wyj.com.cn",nocase; classtype:attempted-recon; sid:200010474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.3rdeye.com.cn",nocase; classtype:attempted-recon; sid:200010475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.41sj8oo5.com.cn",nocase; classtype:attempted-recon; sid:200010476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.4yhmeni1.com.cn",nocase; classtype:attempted-recon; sid:200010477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.5ma8hy6.com.cn",nocase; classtype:attempted-recon; sid:200010478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.5me8jao.com.cn",nocase; classtype:attempted-recon; sid:200010479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.6ei2p4y1.com.cn",nocase; classtype:attempted-recon; sid:200010480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.7arped5f.com.cn",nocase; classtype:attempted-recon; sid:200010481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.7o2z4la.com.cn",nocase; classtype:attempted-recon; sid:200010482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.87crjh0i.com.cn",nocase; classtype:attempted-recon; sid:200010483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.94wbag4w.com.cn",nocase; classtype:attempted-recon; sid:200010484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.96a2lk5h.com.cn",nocase; classtype:attempted-recon; sid:200010485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.999365.com.cn",nocase; classtype:attempted-recon; sid:200010486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.99zixue.com.cn",nocase; classtype:attempted-recon; sid:200010487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.adopen.com.cn",nocase; classtype:attempted-recon; sid:200010488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ae9jlc1w.com.cn",nocase; classtype:attempted-recon; sid:200010489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.aibihua.com.cn",nocase; classtype:attempted-recon; sid:200010490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.air-com.com.cn",nocase; classtype:attempted-recon; sid:200010491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.americar.com.cn",nocase; classtype:attempted-recon; sid:200010492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.anmg61.com.cn",nocase; classtype:attempted-recon; sid:200010493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.anmg95.com.cn",nocase; classtype:attempted-recon; sid:200010494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.bengkuan.com.cn",nocase; classtype:attempted-recon; sid:200010495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.biotope.com.cn",nocase; classtype:attempted-recon; sid:200010496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.bjdaohang.com.cn",nocase; classtype:attempted-recon; sid:200010497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.caochui.com.cn",nocase; classtype:attempted-recon; sid:200010498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.cdchenlu.com.cn",nocase; classtype:attempted-recon; sid:200010499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.cenben.com.cn",nocase; classtype:attempted-recon; sid:200010500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.cengcong.com.cn",nocase; classtype:attempted-recon; sid:200010501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ch1twwgm.com.cn",nocase; classtype:attempted-recon; sid:200010502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.chonlon.com.cn",nocase; classtype:attempted-recon; sid:200010503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.chuoyong.com.cn",nocase; classtype:attempted-recon; sid:200010504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.chuzai.com.cn",nocase; classtype:attempted-recon; sid:200010505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.commtown.com.cn",nocase; classtype:attempted-recon; sid:200010506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.cosmoveda.com.cn",nocase; classtype:attempted-recon; sid:200010507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.cxqingxi.com.cn",nocase; classtype:attempted-recon; sid:200010508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.cyok9b9k.com.cn",nocase; classtype:attempted-recon; sid:200010509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.cz9s5fe.com.cn",nocase; classtype:attempted-recon; sid:200010510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.czqylaw.com.cn",nocase; classtype:attempted-recon; sid:200010511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.dangrang.com.cn",nocase; classtype:attempted-recon; sid:200010512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.dascrede.com.cn",nocase; classtype:attempted-recon; sid:200010513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.diaozuan.com.cn",nocase; classtype:attempted-recon; sid:200010514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.dnmkwf1o.com.cn",nocase; classtype:attempted-recon; sid:200010515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.dytieba.com.cn",nocase; classtype:attempted-recon; sid:200010516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.e0z5m6w.com.cn",nocase; classtype:attempted-recon; sid:200010517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.elourwb.com.cn",nocase; classtype:attempted-recon; sid:200010518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.exlrtf.com.cn",nocase; classtype:attempted-recon; sid:200010519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.fchzjdlo.com.cn",nocase; classtype:attempted-recon; sid:200010520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ffffound.com.cn",nocase; classtype:attempted-recon; sid:200010521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ffmfie.com.cn",nocase; classtype:attempted-recon; sid:200010522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.findsky.com.cn",nocase; classtype:attempted-recon; sid:200010523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.foupian.com.cn",nocase; classtype:attempted-recon; sid:200010524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.g2ahwmfl.com.cn",nocase; classtype:attempted-recon; sid:200010525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ganghuan.com.cn",nocase; classtype:attempted-recon; sid:200010526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ganhuang.com.cn",nocase; classtype:attempted-recon; sid:200010527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ge7r4k6k.com.cn",nocase; classtype:attempted-recon; sid:200010528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.goldieas.com.cn",nocase; classtype:attempted-recon; sid:200010529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.goshico.com.cn",nocase; classtype:attempted-recon; sid:200010530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.goucun.com.cn",nocase; classtype:attempted-recon; sid:200010531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.guashui.com.cn",nocase; classtype:attempted-recon; sid:200010532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.guoxuwang.com.cn",nocase; classtype:attempted-recon; sid:200010533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.h9c6l1jl.com.cn",nocase; classtype:attempted-recon; sid:200010534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.hbixwjd.com.cn",nocase; classtype:attempted-recon; sid:200010535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.henchui.com.cn",nocase; classtype:attempted-recon; sid:200010536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.hmzoye.com.cn",nocase; classtype:attempted-recon; sid:200010537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.hncysq.com.cn",nocase; classtype:attempted-recon; sid:200010538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.hnhyxy.com.cn",nocase; classtype:attempted-recon; sid:200010539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.hotfax.com.cn",nocase; classtype:attempted-recon; sid:200010540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.huaihun.com.cn",nocase; classtype:attempted-recon; sid:200010541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.hwblfwzy.com.cn",nocase; classtype:attempted-recon; sid:200010542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.in-me.com.cn",nocase; classtype:attempted-recon; sid:200010543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.jiqingba.com.cn",nocase; classtype:attempted-recon; sid:200010544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.juancui.com.cn",nocase; classtype:attempted-recon; sid:200010545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.kado-icl.com.cn",nocase; classtype:attempted-recon; sid:200010546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.king-cos.com.cn",nocase; classtype:attempted-recon; sid:200010547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.kmjsk.com.cn",nocase; classtype:attempted-recon; sid:200010548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.knwwzd8w.com.cn",nocase; classtype:attempted-recon; sid:200010549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.koreaego.com.cn",nocase; classtype:attempted-recon; sid:200010550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ks3000.com.cn",nocase; classtype:attempted-recon; sid:200010551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.kzntsjpw.com.cn",nocase; classtype:attempted-recon; sid:200010552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.leishuan.com.cn",nocase; classtype:attempted-recon; sid:200010553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.lifelle.com.cn",nocase; classtype:attempted-recon; sid:200010554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.lintuo.com.cn",nocase; classtype:attempted-recon; sid:200010555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ljnnfx.com.cn",nocase; classtype:attempted-recon; sid:200010556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.lkklpfp.com.cn",nocase; classtype:attempted-recon; sid:200010557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.longrang.com.cn",nocase; classtype:attempted-recon; sid:200010558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.lygclean.com.cn",nocase; classtype:attempted-recon; sid:200010559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.lyjzsjy.com.cn",nocase; classtype:attempted-recon; sid:200010560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.masang.com.cn",nocase; classtype:attempted-recon; sid:200010561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.mcgwkyyk.com.cn",nocase; classtype:attempted-recon; sid:200010562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.memberly.com.cn",nocase; classtype:attempted-recon; sid:200010563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.menduimen.com.cn",nocase; classtype:attempted-recon; sid:200010564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.mfdamjse.com.cn",nocase; classtype:attempted-recon; sid:200010565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.mgm985.com.cn",nocase; classtype:attempted-recon; sid:200010566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.mouruo.com.cn",nocase; classtype:attempted-recon; sid:200010567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.myglgw.com.cn",nocase; classtype:attempted-recon; sid:200010568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.nangkong.com.cn",nocase; classtype:attempted-recon; sid:200010569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.nashuai.com.cn",nocase; classtype:attempted-recon; sid:200010570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.nbabjs.com.cn",nocase; classtype:attempted-recon; sid:200010571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ncvkfm.com.cn",nocase; classtype:attempted-recon; sid:200010572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.nengluan.com.cn",nocase; classtype:attempted-recon; sid:200010573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.nenshao.com.cn",nocase; classtype:attempted-recon; sid:200010574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.newdate.com.cn",nocase; classtype:attempted-recon; sid:200010575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.niaodiao.com.cn",nocase; classtype:attempted-recon; sid:200010576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.njanrui.com.cn",nocase; classtype:attempted-recon; sid:200010577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.nmhoi6c1.com.cn",nocase; classtype:attempted-recon; sid:200010578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.nmok1lw.com.cn",nocase; classtype:attempted-recon; sid:200010579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.nongceng.com.cn",nocase; classtype:attempted-recon; sid:200010580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ntours.com.cn",nocase; classtype:attempted-recon; sid:200010581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.onlymaya.com.cn",nocase; classtype:attempted-recon; sid:200010582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ousikai.com.cn",nocase; classtype:attempted-recon; sid:200010583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.pocketmac.com.cn",nocase; classtype:attempted-recon; sid:200010584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.pocketpc.com.cn",nocase; classtype:attempted-recon; sid:200010585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.pzai72m5.com.cn",nocase; classtype:attempted-recon; sid:200010586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.qicheye.com.cn",nocase; classtype:attempted-recon; sid:200010587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.rangsang.com.cn",nocase; classtype:attempted-recon; sid:200010588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.rcec62ya.com.cn",nocase; classtype:attempted-recon; sid:200010589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.rl04odcl.com.cn",nocase; classtype:attempted-recon; sid:200010590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.rstudio.com.cn",nocase; classtype:attempted-recon; sid:200010591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ruogan.com.cn",nocase; classtype:attempted-recon; sid:200010592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.rwbwdeca.com.cn",nocase; classtype:attempted-recon; sid:200010593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.satour.com.cn",nocase; classtype:attempted-recon; sid:200010594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.sechuang.com.cn",nocase; classtype:attempted-recon; sid:200010595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.shuanpeng.com.cn",nocase; classtype:attempted-recon; sid:200010596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.simante.com.cn",nocase; classtype:attempted-recon; sid:200010597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.skyhunter.com.cn",nocase; classtype:attempted-recon; sid:200010598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.snowtiger.com.cn",nocase; classtype:attempted-recon; sid:200010599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.sondaflex.com.cn",nocase; classtype:attempted-recon; sid:200010600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.songnuan.com.cn",nocase; classtype:attempted-recon; sid:200010601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.soutie.com.cn",nocase; classtype:attempted-recon; sid:200010602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.sunroys.com.cn",nocase; classtype:attempted-recon; sid:200010603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.tcyn6mf.com.cn",nocase; classtype:attempted-recon; sid:200010604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.tglmer.com.cn",nocase; classtype:attempted-recon; sid:200010605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.tha9s0kc.com.cn",nocase; classtype:attempted-recon; sid:200010606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.theraplex.com.cn",nocase; classtype:attempted-recon; sid:200010607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.tiffki.com.cn",nocase; classtype:attempted-recon; sid:200010608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.tjzlhzj.com.cn",nocase; classtype:attempted-recon; sid:200010609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.topdpd.com.cn",nocase; classtype:attempted-recon; sid:200010610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.trip4u.com.cn",nocase; classtype:attempted-recon; sid:200010611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.tugjqs.com.cn",nocase; classtype:attempted-recon; sid:200010612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.tushu010.com.cn",nocase; classtype:attempted-recon; sid:200010613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.tydfblog.com.cn",nocase; classtype:attempted-recon; sid:200010614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.tzom4nab.com.cn",nocase; classtype:attempted-recon; sid:200010615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.uxgzqnx.com.cn",nocase; classtype:attempted-recon; sid:200010616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.uxmbaiy.com.cn",nocase; classtype:attempted-recon; sid:200010617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.wdtjwo86.com.cn",nocase; classtype:attempted-recon; sid:200010618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.weiseng.com.cn",nocase; classtype:attempted-recon; sid:200010619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.wengniao.com.cn",nocase; classtype:attempted-recon; sid:200010620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.wmfoankc.com.cn",nocase; classtype:attempted-recon; sid:200010621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.wodfpl3.com.cn",nocase; classtype:attempted-recon; sid:200010622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ws-f.com.cn",nocase; classtype:attempted-recon; sid:200010623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.wtp017fn.com.cn",nocase; classtype:attempted-recon; sid:200010624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.wuxiaozhu.com.cn",nocase; classtype:attempted-recon; sid:200010625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.xiashua.com.cn",nocase; classtype:attempted-recon; sid:200010626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.xiesui.com.cn",nocase; classtype:attempted-recon; sid:200010627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.xiongcou.com.cn",nocase; classtype:attempted-recon; sid:200010628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.xyekod.com.cn",nocase; classtype:attempted-recon; sid:200010629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.yhzjw7.com.cn",nocase; classtype:attempted-recon; sid:200010630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.yimingedu.com.cn",nocase; classtype:attempted-recon; sid:200010631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ylfapiao.com.cn",nocase; classtype:attempted-recon; sid:200010632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ym8i2wmc.com.cn",nocase; classtype:attempted-recon; sid:200010633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ynak4890.com.cn",nocase; classtype:attempted-recon; sid:200010634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.yuezhun.com.cn",nocase; classtype:attempted-recon; sid:200010635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.zgqclbjw.com.cn",nocase; classtype:attempted-recon; sid:200010636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.zhaizhe.com.cn",nocase; classtype:attempted-recon; sid:200010637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.zhcw76.com.cn",nocase; classtype:attempted-recon; sid:200010638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.zhengshao.com.cn",nocase; classtype:attempted-recon; sid:200010639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.zhuanniao.com.cn",nocase; classtype:attempted-recon; sid:200010640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.zoudang.com.cn",nocase; classtype:attempted-recon; sid:200010641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsicaveionse.viscesaie.2taoke.com.cn",nocase; classtype:attempted-recon; sid:200010642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsicaveionse.viscesaie.dascrede.com.cn",nocase; classtype:attempted-recon; sid:200010643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsicaveionse.viscesaie.eczifkk8.com.cn",nocase; classtype:attempted-recon; sid:200010644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsicaveionse.viscesaie.jldele168.com.cn",nocase; classtype:attempted-recon; sid:200010645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsicaveionse.viscesaie.lintuo.com.cn",nocase; classtype:attempted-recon; sid:200010646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsicaveionse.viscesaie.ljnnfx.com.cn",nocase; classtype:attempted-recon; sid:200010647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsicaveionse.viscesaie.masang.com.cn",nocase; classtype:attempted-recon; sid:200010648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsicaveionse.viscesaie.onlysun.com.cn",nocase; classtype:attempted-recon; sid:200010649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsicaveionse.viscesaie.tha9s0kc.com.cn",nocase; classtype:attempted-recon; sid:200010650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsicaveionse.viscesaie.yhzjw7.com.cn",nocase; classtype:attempted-recon; sid:200010651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vtrblbluewin01.ukit.me",nocase; classtype:attempted-recon; sid:200010652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vtrq51.hyperphp.com",nocase; classtype:attempted-recon; sid:200010653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vtxmail2018.myfreesites.net",nocase; classtype:attempted-recon; sid:200010654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vurdirigne.weebly.com",nocase; classtype:attempted-recon; sid:200010655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vvanm.com",nocase; classtype:attempted-recon; sid:200010656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vvcristianaradio.com",nocase; classtype:attempted-recon; sid:200010657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vvntechnologies.com",nocase; classtype:attempted-recon; sid:200010658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vxdse.myfreesites.net",nocase; classtype:attempted-recon; sid:200010659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"w4545676788-6753566578998865323-8524346553234.on.fleek.co",nocase; classtype:attempted-recon; sid:200010660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"w9eventos.com",nocase; classtype:attempted-recon; sid:200010661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wa.mfs.gg",nocase; classtype:attempted-recon; sid:200010662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wagmaker.cnt.br",nocase; classtype:attempted-recon; sid:200010663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wahed-koudsi2001.github.io",nocase; classtype:attempted-recon; sid:200010664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wailet-pogylonr.technology",nocase; classtype:attempted-recon; sid:200010665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walken.me",nocase; classtype:attempted-recon; sid:200010666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walken.org",nocase; classtype:attempted-recon; sid:200010667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallcores.com",nocase; classtype:attempted-recon; sid:200010668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walldesign.com.tr",nocase; classtype:attempted-recon; sid:200010669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-connect012.web.app",nocase; classtype:attempted-recon; sid:200010670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-pollygon-technollogy.com",nocase; classtype:attempted-recon; sid:200010671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet-polygon.login-en.com",nocase; classtype:attempted-recon; sid:200010672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet.near.org.omisbeta.com",nocase; classtype:attempted-recon; sid:200010673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet.neeaar.com",nocase; classtype:attempted-recon; sid:200010674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet.polygon-technology.me",nocase; classtype:attempted-recon; sid:200010675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet.roninchain.cf",nocase; classtype:attempted-recon; sid:200010676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallet.silesiacoin.com",nocase; classtype:attempted-recon; sid:200010677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletconnectsecurely.com",nocase; classtype:attempted-recon; sid:200010678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletconnecttv.com",nocase; classtype:attempted-recon; sid:200010679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletmigrateweb3.com",nocase; classtype:attempted-recon; sid:200010680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletreconcile.com",nocase; classtype:attempted-recon; sid:200010681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletscsupp0rtcentar.website2.me",nocase; classtype:attempted-recon; sid:200010682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletsencrypt.net",nocase; classtype:attempted-recon; sid:200010683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletsencrypts.com",nocase; classtype:attempted-recon; sid:200010684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"walletvalidators.com",nocase; classtype:attempted-recon; sid:200010685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wana78420.myfreesites.net",nocase; classtype:attempted-recon; sid:200010686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"waqassupplies.com",nocase; classtype:attempted-recon; sid:200010687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"warmbuckwal.tk",nocase; classtype:attempted-recon; sid:200010688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"warringtonvaleting.com",nocase; classtype:attempted-recon; sid:200010689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"warsa.bandungkab.go.id",nocase; classtype:attempted-recon; sid:200010690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wart.analisededocserviceasser.cloud",nocase; classtype:attempted-recon; sid:200010691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"watchess.com.pk",nocase; classtype:attempted-recon; sid:200010692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"waves-enterprise.com",nocase; classtype:attempted-recon; sid:200010693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wayuai.com",nocase; classtype:attempted-recon; sid:200010694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wd3.org",nocase; classtype:attempted-recon; sid:200010695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"we0942.weebly.com",nocase; classtype:attempted-recon; sid:200010696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weathered.mnevicionzone.workers.dev",nocase; classtype:attempted-recon; sid:200010697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-exoduss.com",nocase; classtype:attempted-recon; sid:200010698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-sand-home.blogspot.com",nocase; classtype:attempted-recon; sid:200010699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web-wallet-acess.blogspot.com",nocase; classtype:attempted-recon; sid:200010700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.bitbank.la",nocase; classtype:attempted-recon; sid:200010701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.bredbanque.trans.sylog.co",nocase; classtype:attempted-recon; sid:200010702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.logodesign.net",nocase; classtype:attempted-recon; sid:200010703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.nomuracoin.vip",nocase; classtype:attempted-recon; sid:200010704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.prodepo.com.tr",nocase; classtype:attempted-recon; sid:200010705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.taxicity.cn",nocase; classtype:attempted-recon; sid:200010706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web3.clients-demo-website.com",nocase; classtype:attempted-recon; sid:200010707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web3coi.web.app",nocase; classtype:attempted-recon; sid:200010708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web3nodeapp.net",nocase; classtype:attempted-recon; sid:200010709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webairbnb.com",nocase; classtype:attempted-recon; sid:200010710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webbadimserver.weebly.com",nocase; classtype:attempted-recon; sid:200010711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webclient.moreapp.com",nocase; classtype:attempted-recon; sid:200010712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webconnectappsync.com",nocase; classtype:attempted-recon; sid:200010713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webdatamltrainingdiag842.blob.core.windows.net",nocase; classtype:attempted-recon; sid:200010714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webdesecure.clickfunnels.com",nocase; classtype:attempted-recon; sid:200010715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webhjhjhjhbj.weebly.com",nocase; classtype:attempted-recon; sid:200010716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webhostingserviceo31.web.app",nocase; classtype:attempted-recon; sid:200010717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webhostingserviceo36.web.app",nocase; classtype:attempted-recon; sid:200010718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webhostingserviceo43.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webhostingserviceo5.web.app",nocase; classtype:attempted-recon; sid:200010720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webhostingserviceo66.web.app",nocase; classtype:attempted-recon; sid:200010721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webhostingserviceo73.web.app",nocase; classtype:attempted-recon; sid:200010722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webhostingserviceo74.web.app",nocase; classtype:attempted-recon; sid:200010723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webimelac-creteilf.godaddysites.com",nocase; classtype:attempted-recon; sid:200010724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-109872.weeblysite.com",nocase; classtype:attempted-recon; sid:200010725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-cisco.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-cisco.web.app",nocase; classtype:attempted-recon; sid:200010727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-laposte19.yolasite.com",nocase; classtype:attempted-recon; sid:200010728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-laposte27.yolasite.com",nocase; classtype:attempted-recon; sid:200010729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-roundcubeblack.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-roundcubeblack.web.app",nocase; classtype:attempted-recon; sid:200010731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-sfr-connexion.laviewddns.com",nocase; classtype:attempted-recon; sid:200010732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail-sso8uyg.web.app",nocase; classtype:attempted-recon; sid:200010733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail.bellahills.com",nocase; classtype:attempted-recon; sid:200010734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail.salemgroups.com",nocase; classtype:attempted-recon; sid:200010735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail6.networksolutionsemail.com",nocase; classtype:attempted-recon; sid:200010736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmail81pne.mailsrrsso908.workers.dev",nocase; classtype:attempted-recon; sid:200010737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmailadmin0.myfreesites.net",nocase; classtype:attempted-recon; sid:200010738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmailmaster.ml",nocase; classtype:attempted-recon; sid:200010739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmailoutl.zyrosite.com",nocase; classtype:attempted-recon; sid:200010740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webmailwere.weebly.com",nocase; classtype:attempted-recon; sid:200010741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webnodefix.com",nocase; classtype:attempted-recon; sid:200010742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webseguridadportalbancadavivienda.com",nocase; classtype:attempted-recon; sid:200010743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webservice-mailupdatemail.arqanexportcompany1664.workers.dev",nocase; classtype:attempted-recon; sid:200010744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webspaceusp.com",nocase; classtype:attempted-recon; sid:200010745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webstorage-user-auth.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webstorage-user-auth.web.app",nocase; classtype:attempted-recon; sid:200010747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webstories.eu",nocase; classtype:attempted-recon; sid:200010748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"websupport.godaddysites.com",nocase; classtype:attempted-recon; sid:200010749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wecex60702.wixsite.com",nocase; classtype:attempted-recon; sid:200010750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weldinghelmetshq.com",nocase; classtype:attempted-recon; sid:200010751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wellsfargo-1.duckdns.org",nocase; classtype:attempted-recon; sid:200010752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wellssecure.redirectme.net",nocase; classtype:attempted-recon; sid:200010753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"welou.de",nocase; classtype:attempted-recon; sid:200010754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wendefornote.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wendefornote.web.app",nocase; classtype:attempted-recon; sid:200010756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wendonenote.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wendonenote.web.app",nocase; classtype:attempted-recon; sid:200010758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wendtwonote.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wendtwonote.web.app",nocase; classtype:attempted-recon; sid:200010760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wereldgeschiedenis.com",nocase; classtype:attempted-recon; sid:200010761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"werty23456.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weteachbh.com",nocase; classtype:attempted-recon; sid:200010763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wetransfe-f5044.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wetransfe-f5044.web.app",nocase; classtype:attempted-recon; sid:200010765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"weyadvocacia.com.br",nocase; classtype:attempted-recon; sid:200010766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wfwfwfeefefefggggg.000webhostapp.com",nocase; classtype:attempted-recon; sid:200010767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wgfdbs.cc",nocase; classtype:attempted-recon; sid:200010768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wgh3.wghservers.com",nocase; classtype:attempted-recon; sid:200010769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whare.100webspace.net",nocase; classtype:attempted-recon; sid:200010770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wheelerforkanawha.com",nocase; classtype:attempted-recon; sid:200010771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wheelsofmercy.org",nocase; classtype:attempted-recon; sid:200010772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whirl.0710edu.cn",nocase; classtype:attempted-recon; sid:200010773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whirl.5mufgpn9.cn",nocase; classtype:attempted-recon; sid:200010774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whirl.d6s1riv.cn",nocase; classtype:attempted-recon; sid:200010775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whirl.dxpz158.cn",nocase; classtype:attempted-recon; sid:200010776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whirl.gctrd.cn",nocase; classtype:attempted-recon; sid:200010777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whirl.gjcjp.cn",nocase; classtype:attempted-recon; sid:200010778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whirl.iugqnkyr.cn",nocase; classtype:attempted-recon; sid:200010779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whirl.jbtlguc.cn",nocase; classtype:attempted-recon; sid:200010780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whirl.peswnwlc.cn",nocase; classtype:attempted-recon; sid:200010781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whirl.xaefandl.cn",nocase; classtype:attempted-recon; sid:200010782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whirl.zhihan365.cn",nocase; classtype:attempted-recon; sid:200010783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"white-block-2e16.desatt.workers.dev",nocase; classtype:attempted-recon; sid:200010784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"white-bush-4bbc.goldenwolf542.workers.dev",nocase; classtype:attempted-recon; sid:200010785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whitetzfx.com",nocase; classtype:attempted-recon; sid:200010786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"widadkamillah.github.io",nocase; classtype:attempted-recon; sid:200010787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"widget-dot-lbk-asistente-pre-principal.appspot.com",nocase; classtype:attempted-recon; sid:200010788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wiebmailac-grenobie.godaddysites.com",nocase; classtype:attempted-recon; sid:200010789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wiehjvg38jcdg.shop",nocase; classtype:attempted-recon; sid:200010790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wild-star-f174.4882sddxshaee.workers.dev",nocase; classtype:attempted-recon; sid:200010791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wildcard.lindahogan.com.au",nocase; classtype:attempted-recon; sid:200010792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wildcard.netflixsecurity01.duckdns.org",nocase; classtype:attempted-recon; sid:200010793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"williamsltrb23.wixsite.com",nocase; classtype:attempted-recon; sid:200010794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"winbank.godaddysites.com",nocase; classtype:attempted-recon; sid:200010795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"windowsupdaterev.xyz",nocase; classtype:attempted-recon; sid:200010796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"windstream-net.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"winprop.in",nocase; classtype:attempted-recon; sid:200010798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"winscometal.cam",nocase; classtype:attempted-recon; sid:200010799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"winter-thunder-a1ba.gdjklahdkjsadampie.workers.dev",nocase; classtype:attempted-recon; sid:200010800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wiqpczsnbp.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wireconfirmation68c10a25442a3e13.blogspot.com",nocase; classtype:attempted-recon; sid:200010802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wires-business-starter.webflow.io",nocase; classtype:attempted-recon; sid:200010803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wirtschaft.baesweiler.de",nocase; classtype:attempted-recon; sid:200010804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wisgjgjhtios.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wisgjgjhtios.web.app",nocase; classtype:attempted-recon; sid:200010806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withered-union-2058.on.fleek.co",nocase; classtype:attempted-recon; sid:200010807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withsupportaids.com",nocase; classtype:attempted-recon; sid:200010808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wiwoyh1jg4.shop",nocase; classtype:attempted-recon; sid:200010809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wkazisan.github.io",nocase; classtype:attempted-recon; sid:200010810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wlc-idiomas.com",nocase; classtype:attempted-recon; sid:200010811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wllfrrgoath-verrii.live",nocase; classtype:attempted-recon; sid:200010812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wltcnt08201.blogspot.com",nocase; classtype:attempted-recon; sid:200010813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"woenjoytheattwebversion-107788.square.site",nocase; classtype:attempted-recon; sid:200010814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"woenjoytheattwebversion.weebly.com",nocase; classtype:attempted-recon; sid:200010815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"woliot-pejygem.com",nocase; classtype:attempted-recon; sid:200010816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wonderfulday001.weebly.com",nocase; classtype:attempted-recon; sid:200010817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"woodforestapps3.typeform.com",nocase; classtype:attempted-recon; sid:200010818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wordpress-81153-0.cloudclusters.net",nocase; classtype:attempted-recon; sid:200010819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"workprotocoles-com.webs.com",nocase; classtype:attempted-recon; sid:200010820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"workset.eu",nocase; classtype:attempted-recon; sid:200010821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"world-js.com",nocase; classtype:attempted-recon; sid:200010822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wowow.hapronunciationppy.com",nocase; classtype:attempted-recon; sid:200010823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wozirqt.ml",nocase; classtype:attempted-recon; sid:200010824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wp-login.azurewebsites.net",nocase; classtype:attempted-recon; sid:200010825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wp1sl706.top",nocase; classtype:attempted-recon; sid:200010826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wpenjoythewebversionnow-108553.square.site",nocase; classtype:attempted-recon; sid:200010827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wpproject.teamxbd.com",nocase; classtype:attempted-recon; sid:200010828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wpsoar.com",nocase; classtype:attempted-recon; sid:200010829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wpsservices.creatorlink.net",nocase; classtype:attempted-recon; sid:200010830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wqcompose.weebly.com",nocase; classtype:attempted-recon; sid:200010831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wqzomifcmx.duckdns.org",nocase; classtype:attempted-recon; sid:200010832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wredf.laxlckn.cn",nocase; classtype:attempted-recon; sid:200010833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wunhantienquocteenhanh.weebly.com",nocase; classtype:attempted-recon; sid:200010834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wut31gk.shop",nocase; classtype:attempted-recon; sid:200010835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wuxihr.cn",nocase; classtype:attempted-recon; sid:200010836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wv3vajpaeass.com",nocase; classtype:attempted-recon; sid:200010837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wvwsorare-com.blogspot.com",nocase; classtype:attempted-recon; sid:200010838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ww1.ibkcredit.com",nocase; classtype:attempted-recon; sid:200010839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ww11.lbk-personas.website",nocase; classtype:attempted-recon; sid:200010840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ww25.falabellabanco.com",nocase; classtype:attempted-recon; sid:200010841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwv-bombcrypto-log.com",nocase; classtype:attempted-recon; sid:200010842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-anazonm.jp.iofo.modv.com.cn",nocase; classtype:attempted-recon; sid:200010843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-app22.link",nocase; classtype:attempted-recon; sid:200010844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-bitflyer-go-com-br.blogspot.com",nocase; classtype:attempted-recon; sid:200010845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-cita-previa-en-linea-cr.yolasite.com",nocase; classtype:attempted-recon; sid:200010846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-cursosdigitalesmx-com.filesusr.com",nocase; classtype:attempted-recon; sid:200010847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-degelyehuda-org-il.filesusr.com",nocase; classtype:attempted-recon; sid:200010848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-europe564598-com.filesusr.com",nocase; classtype:attempted-recon; sid:200010849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-europessign-com.filesusr.com",nocase; classtype:attempted-recon; sid:200010850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-pancake-swap.com",nocase; classtype:attempted-recon; sid:200010851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-raydium.org",nocase; classtype:attempted-recon; sid:200010852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-yodubash-com.hachette.site",nocase; classtype:attempted-recon; sid:200010853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-yodubash-com.lebaifumall.site",nocase; classtype:attempted-recon; sid:200010854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www-yodubash-com.mutshatsha.site",nocase; classtype:attempted-recon; sid:200010855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www1.smbcaocard.icu",nocase; classtype:attempted-recon; sid:200010856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www1.smbcascard.icu",nocase; classtype:attempted-recon; sid:200010857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.aeno-sozn.icu",nocase; classtype:attempted-recon; sid:200010858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.aenocae.icu",nocase; classtype:attempted-recon; sid:200010859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.aenocze.icu",nocase; classtype:attempted-recon; sid:200010860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.aenoseau.icu",nocase; classtype:attempted-recon; sid:200010861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.aenosesu.icu",nocase; classtype:attempted-recon; sid:200010862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.aenosnsu.icu",nocase; classtype:attempted-recon; sid:200010863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.anazaon.co.jp.login.jingefuzhuangfangzhi.cn",nocase; classtype:attempted-recon; sid:200010864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.anazaon.co.jp.login.osur.cn",nocase; classtype:attempted-recon; sid:200010865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.smbcaocard.icu",nocase; classtype:attempted-recon; sid:200010866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www2.smbcascard.icu",nocase; classtype:attempted-recon; sid:200010867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www3.cmtb.workers.dev",nocase; classtype:attempted-recon; sid:200010868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"www3.idpass-net.nenkin.go.jp",nocase; classtype:attempted-recon; sid:200010869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwwalpha.godaddysites.com",nocase; classtype:attempted-recon; sid:200010870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwwhomedecoration.com",nocase; classtype:attempted-recon; sid:200010871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwwipko.pl",nocase; classtype:attempted-recon; sid:200010872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wwwzonasegura.netcajasullana.com",nocase; classtype:attempted-recon; sid:200010873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"x2-shiba.cc",nocase; classtype:attempted-recon; sid:200010874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xbttinternet.github.io",nocase; classtype:attempted-recon; sid:200010875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xfeoxxokua9.typeform.com",nocase; classtype:attempted-recon; sid:200010876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xfinniityinox.weebly.com",nocase; classtype:attempted-recon; sid:200010877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn----ctbeu0aamfekp0m.xn--p1ai",nocase; classtype:attempted-recon; sid:200010878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--80aa8bbcehc.xn--p1ai",nocase; classtype:attempted-recon; sid:200010879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--allgrolokalnie-x4b.pl",nocase; classtype:attempted-recon; sid:200010880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--conta-atualiza-o-snb5e.weebly.com",nocase; classtype:attempted-recon; sid:200010881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--papcha-rt8b.com",nocase; classtype:attempted-recon; sid:200010882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xn--vervollstndigen-sie-ihre-einrichtung-89c.ae-g.eu",nocase; classtype:attempted-recon; sid:200010883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xpress24.eu",nocase; classtype:attempted-recon; sid:200010884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xpubcalculation.info",nocase; classtype:attempted-recon; sid:200010885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xqcpeou.top",nocase; classtype:attempted-recon; sid:200010886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xsbrookshhjx.top",nocase; classtype:attempted-recon; sid:200010887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xtio.ch",nocase; classtype:attempted-recon; sid:200010888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xtyiuknmog.duckdns.org",nocase; classtype:attempted-recon; sid:200010889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xvalhalla.me",nocase; classtype:attempted-recon; sid:200010890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xwcyituoiouytrt-tgjh9diov4181332.codeanyapp.com",nocase; classtype:attempted-recon; sid:200010891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xwebmailpostmailsrvr.web.app",nocase; classtype:attempted-recon; sid:200010892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxbtinternet.github.io",nocase; classtype:attempted-recon; sid:200010893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxbtinternett.github.io",nocase; classtype:attempted-recon; sid:200010894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxsw.ldsage.top",nocase; classtype:attempted-recon; sid:200010895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxsw.muuiwm.top",nocase; classtype:attempted-recon; sid:200010896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xxx-com-dot-c2c01-531c7.uc.r.appspot.com",nocase; classtype:attempted-recon; sid:200010897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xzbbboptuh.duckdns.org",nocase; classtype:attempted-recon; sid:200010898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@bjhjk.efureco.cn",nocase; classtype:attempted-recon; sid:200010899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@dfgfgs.rqpoomg.cn",nocase; classtype:attempted-recon; sid:200010900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@dgbbgj.yretffb.cn",nocase; classtype:attempted-recon; sid:200010901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@gfdsnb.lcbcvp.cn",nocase; classtype:attempted-recon; sid:200010902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@hngfbd.kpuwgvi.cn",nocase; classtype:attempted-recon; sid:200010903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@kjhgv.tzrskwk.cn",nocase; classtype:attempted-recon; sid:200010904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@rgrdha.gekalar.cn",nocase; classtype:attempted-recon; sid:200010905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoo%2eco%2ejp@sdvfh.rlejkfh.cn",nocase; classtype:attempted-recon; sid:200010906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoodomainscservicceses.boxmode.io",nocase; classtype:attempted-recon; sid:200010907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoologithehreinindex.weebly.com",nocase; classtype:attempted-recon; sid:200010908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahoomaily78237uwejhweuu3.yolasite.com",nocase; classtype:attempted-recon; sid:200010909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yahuomall.square.site",nocase; classtype:attempted-recon; sid:200010910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yairix.github.io",nocase; classtype:attempted-recon; sid:200010911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yal.su",nocase; classtype:attempted-recon; sid:200010912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yalena.me",nocase; classtype:attempted-recon; sid:200010913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yananfm.com",nocase; classtype:attempted-recon; sid:200010914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yangindanismanim.com",nocase; classtype:attempted-recon; sid:200010915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yangquanfl.com",nocase; classtype:attempted-recon; sid:200010916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yape-fake.vercel.app",nocase; classtype:attempted-recon; sid:200010917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yaqoobi.org",nocase; classtype:attempted-recon; sid:200010918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yatienadzli.com",nocase; classtype:attempted-recon; sid:200010919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yawningwaterloggedcodec.gastermoon.repl.co",nocase; classtype:attempted-recon; sid:200010920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yayanti.com",nocase; classtype:attempted-recon; sid:200010921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yctfhgtdgf.weebly.com",nocase; classtype:attempted-recon; sid:200010922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yd04888.vip",nocase; classtype:attempted-recon; sid:200010923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yeepii.com",nocase; classtype:attempted-recon; sid:200010924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ygdft659.com",nocase; classtype:attempted-recon; sid:200010925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yhtghd.icigadp.cn",nocase; classtype:attempted-recon; sid:200010926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yip.su",nocase; classtype:attempted-recon; sid:200010927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yishopee.com",nocase; classtype:attempted-recon; sid:200010928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yjtgdf.elxvveb.cn",nocase; classtype:attempted-recon; sid:200010929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yma1ll0g0n.odoo.com",nocase; classtype:attempted-recon; sid:200010930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ymrerzs88.xyz",nocase; classtype:attempted-recon; sid:200010931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yoa.duckdns.org",nocase; classtype:attempted-recon; sid:200010932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yogalife.com.np",nocase; classtype:attempted-recon; sid:200010933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yogatherapistpalmbeach.com",nocase; classtype:attempted-recon; sid:200010934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yogicpa.com",nocase; classtype:attempted-recon; sid:200010935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yogini-polygonbc.blogspot.com",nocase; classtype:attempted-recon; sid:200010936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"youn.bxxnskkdkdkrkrnfnf.workers.dev",nocase; classtype:attempted-recon; sid:200010937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"young-sunset-1923.on.fleek.co",nocase; classtype:attempted-recon; sid:200010938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yousee-refusion.web.app",nocase; classtype:attempted-recon; sid:200010939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yted23.hyperphp.com",nocase; classtype:attempted-recon; sid:200010940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ytjyhegf.byethost32.com",nocase; classtype:attempted-recon; sid:200010941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"yuanghex.com",nocase; classtype:attempted-recon; sid:200010942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ywxo.mjt.lu",nocase; classtype:attempted-recon; sid:200010943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zazaza.yahoosites.com",nocase; classtype:attempted-recon; sid:200010944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zegvrldadz0naldlgltal.org",nocase; classtype:attempted-recon; sid:200010945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zeiron.net.in",nocase; classtype:attempted-recon; sid:200010946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zerione.io",nocase; classtype:attempted-recon; sid:200010947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zerotough.com",nocase; classtype:attempted-recon; sid:200010948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zetkai.com",nocase; classtype:attempted-recon; sid:200010949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zgzihxlrri.firebaseapp.com",nocase; classtype:attempted-recon; sid:200010950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zi0034034323.web.app",nocase; classtype:attempted-recon; sid:200010951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimbra-customercare.berthascholarship.org",nocase; classtype:attempted-recon; sid:200010952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimbranetwork.email",nocase; classtype:attempted-recon; sid:200010953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zimbrasendingupdate.berthascholarship.org",nocase; classtype:attempted-recon; sid:200010954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zlcomposite.com",nocase; classtype:attempted-recon; sid:200010955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zmaflab.com",nocase; classtype:attempted-recon; sid:200010956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zojmaqb.top",nocase; classtype:attempted-recon; sid:200010957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zonapinchinchadigital.com",nocase; classtype:attempted-recon; sid:200010958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zonaseguraextracash.com",nocase; classtype:attempted-recon; sid:200010959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zonassegura.on-cajassullana.com",nocase; classtype:attempted-recon; sid:200010960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zonavirtualpinchicha.com",nocase; classtype:attempted-recon; sid:200010961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zrwsx.rf.gd",nocase; classtype:attempted-recon; sid:200010962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zumaconstructora.com",nocase; classtype:attempted-recon; sid:200010963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zwtogyiqax.duckdns.org",nocase; classtype:attempted-recon; sid:200010964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zxq11400office365login8824lkv.myportfolio.com",nocase; classtype:attempted-recon; sid:200010965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zxzcxvzxvxzc.hostfree.pw",nocase; classtype:attempted-recon; sid:200010966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"1drv.ms",nocase; http_uri; content:"/o/s!bcxisnewh_cnvrnkj_y2f1eccpwq?e=gvtbd8pbpealap_ppbzgja&\;at=9",nocase; classtype:attempted-recon; sid:200010967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"20khvylyn.com",nocase; http_uri; content:"/go/?www.orange.orangao.c%cd%8fo%cd%8fm%cd%8f",nocase; classtype:attempted-recon; sid:200010968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"28ecne20f9u.securetnet.com",nocase; http_uri; content:"/bbva/592cf4/425bdbd3-91cf-4e9f-9498-7a06b3ad75ec/?test=1",nocase; classtype:attempted-recon; sid:200010969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"2dr.eu",nocase; http_uri; content:"/6wwnqr",nocase; classtype:attempted-recon; sid:200010970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"316gym.com",nocase; http_uri; content:"/.well-known/ti/index.1%261.html",nocase; classtype:attempted-recon; sid:200010971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"316gym.com",nocase; http_uri; content:"/.well-known/ti/index.1&1.html",nocase; classtype:attempted-recon; sid:200010972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"3rdstreetmarket.com",nocase; http_uri; content:"/wp-content/themes/3rdst/8-login-form/",nocase; classtype:attempted-recon; sid:200010973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"50in50marathonquest.com",nocase; http_uri; content:"/wp-includes/wauth-login-present-origin-cob",nocase; classtype:attempted-recon; sid:200010974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"50in50marathonquest.com",nocase; http_uri; content:"/wp-includes/wauth-login-present-origin-cob/",nocase; classtype:attempted-recon; sid:200010975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"5gfghgh5gh4g.blogspot.com",nocase; http_uri; content:"/2022/06",nocase; classtype:attempted-recon; sid:200010976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"626525.selcdn.ru",nocase; http_uri; content:"/kd_server/index.html#abuse-uk@example.com",nocase; classtype:attempted-recon; sid:200010977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"99mbet.com",nocase; http_uri; content:"/assets/css/api.php",nocase; classtype:attempted-recon; sid:200010978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"99mbet.com",nocase; http_uri; content:"/assets/img-temp/api.php",nocase; classtype:attempted-recon; sid:200010979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"99mbet.com",nocase; http_uri; content:"/assets/js/api.php",nocase; classtype:attempted-recon; sid:200010980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"a-q-f.com",nocase; http_uri; content:"/openpc/directlogin.do",nocase; classtype:attempted-recon; sid:200010981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abcsubmit.com",nocase; http_uri; content:"/view/id_1ftb3gemh_1ogg?utm=abcsubmit",nocase; classtype:attempted-recon; sid:200010982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"abcsubmit.com",nocase; http_uri; content:"/view/id_1ftb7k8ik_11di?utm=abcsubmit",nocase; classtype:attempted-recon; sid:200010983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?passive=1209600&continue=https://sites.google.com/view/viewbill-bt-1/bt&followup=https://sites.google.com/view/viewbill-bt-1/bt",nocase; classtype:attempted-recon; sid:200010984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/1lordman1man3/oscman.html&followup=https://storage.cloud.google.com/1lordman1man3/oscman.html",nocase; classtype:attempted-recon; sid:200010985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/1lordman1man3/oscman2.html&followup=https://storage.cloud.google.com/1lordman1man3/oscman2.html",nocase; classtype:attempted-recon; sid:200010986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/appspotv450i7r8h9vf9y6yt8uiuft58f7uf5yye36u0jtyf78uuyfyy/index.html&followup=https://storage.cloud.google.com/appspotv450i7r8h9vf9y6yt8uiuft58f7uf5yye36u0jtyf78uuyfyy/index.html",nocase; classtype:attempted-recon; sid:200010987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/employt44to49cclrlolcrl94lnlxo.appspot.com/index.html&followup=https://storage.cloud.google.com/employt44to49cclrlolcrl94lnlxo.appspot.com/index.html",nocase; classtype:attempted-recon; sid:200010988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/maintainancecomponeta.appspot.com/mineindex.html&followup=https://storage.cloud.google.com/maintainancecomponeta.appspot.com/mineindex.html",nocase; classtype:attempted-recon; sid:200010989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"accounts.google.com",nocase; http_uri; content:"/servicelogin?service=cds&passive=1209600&continue=https://storage.cloud.google.com/officpcpspbcncuser.appspot.com/index.htm&followup=https://storage.cloud.google.com/officpcpspbcncuser.appspot.com/index.htm",nocase; classtype:attempted-recon; sid:200010990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.xdwuuu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200010991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"acosoeu-ascaosneouu.yeceku.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200010992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"activatesynmainnet.com",nocase; http_uri; content:"/#",nocase; classtype:attempted-recon; sid:200010993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admin.fifoundry.net",nocase; http_uri; content:"/en/bellcocreditunion/",nocase; classtype:attempted-recon; sid:200010994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"admissionsdirect.com",nocase; http_uri; content:"/gahahlallll/rpartdblii.php",nocase; classtype:attempted-recon; sid:200010995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.516eat.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200010996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.dadasport.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200010997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeccooneon.aoosscen.qjlxqjrjt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200010998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.516eat.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200010999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.dadasport.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.ourpet.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aecoonen.aoosn.qjlxqjrjt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.2icng1zt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.5djao08t.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.angelet.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.bnco6fht.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.filmart.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.m5gr7bnt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aeosmsone.aeosssmaosn.pr-agent.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.2icng1zt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.5djao08t.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.angelet.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aesoasnen.acseossnesn.bnco6fht.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aijcs.blogspot.com",nocase; http_uri; content:"/2005/03/colourful-life-of-aij.html",nocase; classtype:attempted-recon; sid:200011014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aksehirevdenevenakliyat.com",nocase; http_uri; content:"/yonetici/newdocs/gdoccc/",nocase; classtype:attempted-recon; sid:200011015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alinachopra.com",nocase; http_uri; content:"/blog/wp-content/themes/10/",nocase; classtype:attempted-recon; sid:200011016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"allowyourbest.com",nocase; http_uri; content:"/themes/mailupdatefresh/index.html",nocase; classtype:attempted-recon; sid:200011017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"alpha-centaury.likescandy.com",nocase; http_uri; content:"/wordpress/wp-content/upgrade/index3-x.html#r.thomas2007@btinternet.com",nocase; classtype:attempted-recon; sid:200011018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ams3.digitaloceanspaces.com",nocase; http_uri; content:"/docment-83216312631/fax.html?amrhcgtpzxdpy3pachjpbwv0cnvzdc5jb20=",nocase; classtype:attempted-recon; sid:200011019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"anekaslot.com",nocase; http_uri; content:"/jps/webmail_reset.htm",nocase; classtype:attempted-recon; sid:200011020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"angelafarnsworthphotography.lancemanconstruction.com",nocase; http_uri; content:"/outlook/index.html",nocase; classtype:attempted-recon; sid:200011021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.xdwuuu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"aoeu-aaosoauuu.yeceku.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api.addthis.com",nocase; http_uri; content:"/oexchange/0.8/wrap/opengraph?url=ahr0chm6ly93zxetnmrlodiud2vilmfwcc8znzg1mje5lze1lziwmjfjdw5plmn6nto1nibbttu6ntygqu13zwjtyxn0zxi5lze1lziwmjeznzg1mjfjdw5plmn6nto1nibbttu6ntygqu13zwjtyxn0zxiznzg1mje5lze1lziwmjfjdw5plmn6nto1nibbttu6ntygqu0znzg1mjf3zwjtyxn0zxi5lze1lziwmjfjdw5plmn6nto1nibbttm3oduymtu6ntygqu13zwjtyxn0zxiznzg1mjejd2vibwfzdgvyqgn1bmkuy3o=",nocase; classtype:attempted-recon; sid:200011024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"api.whatsapp.com",nocase; http_uri; content:"/message/c3upfo4mvzsgg1?autoload=1&\;app_absent=0",nocase; classtype:attempted-recon; sid:200011025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.box.com",nocase; http_uri; content:"/s/x6agocx9zvj049azirk4aw3xrqdedqhl",nocase; classtype:attempted-recon; sid:200011026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.box.com",nocase; http_uri; content:"/s/ymr0ltw3hmn8icxebz16gjhcyhqa49w4",nocase; classtype:attempted-recon; sid:200011027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.pandadoc.com",nocase; http_uri; content:"/document/27bcdebd7736cefa2575f4f56d1439096536f544",nocase; classtype:attempted-recon; sid:200011028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.pandadoc.com",nocase; http_uri; content:"/p/064ca177fcb7d3b79b1a0de5fb00ade981aeff90?",nocase; classtype:attempted-recon; sid:200011029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.pandadoc.com",nocase; http_uri; content:"/p/26bcb52213a6d759d76014ff4e11c37cae6ae56c",nocase; classtype:attempted-recon; sid:200011030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"app.pandadoc.com",nocase; http_uri; content:"/p/27bcdebd7736cefa2575f4f56d1439096536f544",nocase; classtype:attempted-recon; sid:200011031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"application.axisbank.co.in",nocase; http_uri; content:"/app_redirect/redirect.aspx?id=excesscredit",nocase; classtype:attempted-recon; sid:200011032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appurl.io",nocase; http_uri; content:"/abg7_xbalh",nocase; classtype:attempted-recon; sid:200011033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"appurl.io",nocase; http_uri; content:"/kektfripag",nocase; classtype:attempted-recon; sid:200011034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"argumentua.com",nocase; http_uri; content:"/stati/rasstrel-biznesmena-v-kharkove-druzhba-s-rossiei-byvaet-ubiistvennoi",nocase; classtype:attempted-recon; sid:200011035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoceosmon.aasesceosmn.ourpet.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"asoeosmn.aaseosmn.ourpet.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"at-e.co.jp",nocase; http_uri; content:"/tryu/secure.business.bt.com/app/",nocase; classtype:attempted-recon; sid:200011038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"athensgoldandsilver.gr",nocase; http_uri; content:"/mtb/m&tbank/login.php",nocase; classtype:attempted-recon; sid:200011039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"atomdenki.conohawing.com",nocase; http_uri; content:"/safe-mode/?email=marco.polo@microsoft.com",nocase; classtype:attempted-recon; sid:200011040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"att-promotions.com",nocase; http_uri; content:"/shop/v1/?vn=ctv-tfnlinkbot-pc4-cos-usr-bdl2-alt-wrl-wrle-cc1-cic-cf4-dpf&chatmessage=false&slidechat=false",nocase; classtype:attempted-recon; sid:200011041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"azeioaz.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeidy5ktmm4iowym65jrxv2puft642wujrckouearfskkhl66uqo44u.ipfs.fleek.cool",nocase; http_uri; content:"/?filename=new%204.html",nocase; classtype:attempted-recon; sid:200011043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bafybeiguaf6rpbde6hfl4sqddjsu6euagjkugnkkbsulc5ywcajbtj3lvu.ipfs.dweb.link",nocase; http_uri; content:"/881.shtml",nocase; classtype:attempted-recon; sid:200011044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baovesusonglcxt.com",nocase; http_uri; content:"/wp-includes/index.html",nocase; classtype:attempted-recon; sid:200011045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"baritasonte.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beacons.ai",nocase; http_uri; content:"/optusnetwebmail",nocase; classtype:attempted-recon; sid:200011047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"beacons.ai",nocase; http_uri; content:"/serverym",nocase; classtype:attempted-recon; sid:200011048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bgticket.com",nocase; http_uri; content:"/sdim.minc/sncp.php",nocase; classtype:attempted-recon; sid:200011049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bisentechzone.com",nocase; http_uri; content:"/meta/login.php",nocase; classtype:attempted-recon; sid:200011050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/ft6dv",nocase; classtype:attempted-recon; sid:200011051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/ft7tn",nocase; classtype:attempted-recon; sid:200011052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/ft8xd",nocase; classtype:attempted-recon; sid:200011053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/ft9mh?confirmations",nocase; classtype:attempted-recon; sid:200011054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/ft9nx?confirmations",nocase; classtype:attempted-recon; sid:200011055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/ft9pn?confirmations",nocase; classtype:attempted-recon; sid:200011056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/fuafh#otahal@utia.cas.cz",nocase; classtype:attempted-recon; sid:200011057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/fuasd",nocase; classtype:attempted-recon; sid:200011058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/fuieq",nocase; classtype:attempted-recon; sid:200011059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/furem",nocase; classtype:attempted-recon; sid:200011060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/fuypr",nocase; classtype:attempted-recon; sid:200011061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/fuzp3",nocase; classtype:attempted-recon; sid:200011062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.do",nocase; http_uri; content:"/sitecxo",nocase; classtype:attempted-recon; sid:200011063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly.",nocase; http_uri; content:"/3ijwsm2",nocase; classtype:attempted-recon; sid:200011064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2q7fcpg",nocase; classtype:attempted-recon; sid:200011065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/2zejaht",nocase; classtype:attempted-recon; sid:200011066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/34hdmyt",nocase; classtype:attempted-recon; sid:200011067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/34mhgdg",nocase; classtype:attempted-recon; sid:200011068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/366qkes",nocase; classtype:attempted-recon; sid:200011069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/37wssuw",nocase; classtype:attempted-recon; sid:200011070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/39txfq9",nocase; classtype:attempted-recon; sid:200011071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3aoqym4",nocase; classtype:attempted-recon; sid:200011072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3ccqacg",nocase; classtype:attempted-recon; sid:200011073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3dj0r1p",nocase; classtype:attempted-recon; sid:200011074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3grdybu",nocase; classtype:attempted-recon; sid:200011075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3ib7job?l=www.bancofalabella.cl",nocase; classtype:attempted-recon; sid:200011076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3kueruz",nocase; classtype:attempted-recon; sid:200011077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3ldovbh",nocase; classtype:attempted-recon; sid:200011078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3liysw6",nocase; classtype:attempted-recon; sid:200011079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3mojsnq",nocase; classtype:attempted-recon; sid:200011080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3pi6rwa",nocase; classtype:attempted-recon; sid:200011081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3pyxhfl",nocase; classtype:attempted-recon; sid:200011082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3qplrme",nocase; classtype:attempted-recon; sid:200011083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3qvn6zd",nocase; classtype:attempted-recon; sid:200011084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3wb6m3i",nocase; classtype:attempted-recon; sid:200011085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/3wpb5to",nocase; classtype:attempted-recon; sid:200011086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/banbif-pe",nocase; classtype:attempted-recon; sid:200011087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/claim-gifts",nocase; classtype:attempted-recon; sid:200011088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/lmterbank",nocase; classtype:attempted-recon; sid:200011089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/shpee_coins",nocase; classtype:attempted-recon; sid:200011090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/verifikasiakunanda--2022",nocase; classtype:attempted-recon; sid:200011091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/verifikasipemblokiran_id",nocase; classtype:attempted-recon; sid:200011092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bit.ly",nocase; http_uri; content:"/winner-8888",nocase; classtype:attempted-recon; sid:200011093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/3g1epw3",nocase; classtype:attempted-recon; sid:200011094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/3jrtmmu",nocase; classtype:attempted-recon; sid:200011095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/a/blocked?hash=3ldwr8w&url=https%3a%2f%2fsecure.oldschool.com-login.cz%2fm%3dweblogin%2floginform.ws825%2c295%2c688%2c41525479%2c2004",nocase; classtype:attempted-recon; sid:200011096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bitly.com",nocase; http_uri; content:"/taxirsxcy",nocase; classtype:attempted-recon; sid:200011097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bizinfosoft.com",nocase; http_uri; content:"/www.labanquepostale.fr/postale/",nocase; classtype:attempted-recon; sid:200011098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"blackbearcccouk-my.sharepoint.com",nocase; http_uri; content:"/personal/accounts_blackbearcc_co_uk/_layouts/15/onedrive.aspx?id=%2fpersonal%2faccounts%5fblackbearcc%5fco%5fuk%2fdocuments%2fngb%20urgente%20substanti%c3%able%20update%20%5f%20voorstel%2epdf&\;parent=%2fpersonal%2faccounts%5fblackbearcc%5fco%5fuk%2fdocuments&\;originalpath=ahr0chm6ly9ibgfja2jlyxjjy2nvdwstbxkuc2hhcmvwb2ludc5jb20vomi6l2cvcgvyc29uywwvywnjb3vudhnfymxhy2tizwfyy2nfy29fdwsvrve5as01b19mukjbcutzeunhv3eznw9ccfbtmze3b2fsrnrgnhpzuenbvlfiqt9ydgltzt1tqjzyquroodjvzw",nocase; classtype:attempted-recon; sid:200011099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnbchain.world",nocase; http_uri; content:"/en/balances",nocase; classtype:attempted-recon; sid:200011100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnbchain.world",nocase; http_uri; content:"/en/trade/now-e68_bnb",nocase; classtype:attempted-recon; sid:200011101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bnrexport.com",nocase; http_uri; content:"/comsx",nocase; classtype:attempted-recon; sid:200011102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"bonomequedoencasa.blogspot.com",nocase; http_uri; content:"/?aplicar",nocase; classtype:attempted-recon; sid:200011103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"briggsplumbingandheating.com",nocase; http_uri; content:"/wp-content/za/ned-money-2022",nocase; classtype:attempted-recon; sid:200011104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"c569257608da4dcaafbc-my.sharepoint.com",nocase; http_uri; content:"/:w:/g/personal/dkapaon_brandeis_edu/es1enxze9_xblrutnfjfpm8bbxkssfvrpe6cnirweqaapg?e=4%3afdar13&\;at=9",nocase; classtype:attempted-recon; sid:200011105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"carepath-recruitment.co.uk",nocase; http_uri; content:"/home/payment.php",nocase; classtype:attempted-recon; sid:200011106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cbn.li",nocase; http_uri; content:"/f/9245db2516febd1d3c13c0a90f65c615",nocase; classtype:attempted-recon; sid:200011107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ch-299199919900.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chase-help-support-locked.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chase-onlinehelp.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"chronopostvalidation.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post_12.html",nocase; classtype:attempted-recon; sid:200011111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ci3.googleusercontent.com",nocase; http_uri; content:"/proxy/rdh-rjsrv9zzrx57iscgov74o1gka4qjdfj01qr7v8-pkjgyvn50tivt7pzqgm5kuqdmonqle3f8eq_t8f4xl6jdozabmf2lxy-888ai8hdji633rg",nocase; classtype:attempted-recon; sid:200011112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ci4.googleusercontent.com",nocase; http_uri; content:"/proxy/djc3ckf7jcnj8l0duyaqyjwffeskzbccy9spjiauj_jwrplgw0ahyaf1xozvm6n_fjn8q1-2vkhqqujjr1en3qej703lyxxujt6tto-ttwsl6hgsggp3ehcc",nocase; classtype:attempted-recon; sid:200011113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ci4.googleusercontent.com",nocase; http_uri; content:"/proxy/zjba9cvtmkfnoveyofx6gqong0kqi3s69d9o2y32fmu_gankb59tj-rb79bolx0bwbsemnonfhh2esy9olfdp-20gybztkzstfhfheqrrjuefxwiwkqws29wxm6tdobikwz-qkzfphpaldfr",nocase; classtype:attempted-recon; sid:200011114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clck.ru",nocase; http_uri; content:"/escl6%09%09%09%09%09%20%20",nocase; classtype:attempted-recon; sid:200011115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"clck.ru",nocase; http_uri; content:"/yzuft&post=665308711_32&cc_key",nocase; classtype:attempted-recon; sid:200011116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cleannsmart.com",nocase; http_uri; content:"/upg1/",nocase; classtype:attempted-recon; sid:200011117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"click.message.fruit.com",nocase; http_uri; content:"/?qs=6541641088c869552ced792d84ee93eabf075e23cd5eba83a7d07a40ad9cf2ce36c931984719b9df7de658999defbc87f999ec46970a0280",nocase; classtype:attempted-recon; sid:200011118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cloud.rodemsys.com",nocase; http_uri; content:"/wordpress/volks/volks/57979/login.php",nocase; classtype:attempted-recon; sid:200011119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cncselect.com",nocase; http_uri; content:"/lion/send.php",nocase; classtype:attempted-recon; sid:200011120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coachcalvert.co.uk",nocase; http_uri; content:"/dxbx/updation/",nocase; classtype:attempted-recon; sid:200011121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cognitoforms.com",nocase; http_uri; content:"/agt12/outlook",nocase; classtype:attempted-recon; sid:200011122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cognitoforms.com",nocase; http_uri; content:"/automotive4/hrcompliancesection",nocase; classtype:attempted-recon; sid:200011123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cognitoforms.com",nocase; http_uri; content:"/knpdf/ussecuredpdfdownloader",nocase; classtype:attempted-recon; sid:200011124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"coinmarketcal.com",nocase; http_uri; content:"/en/",nocase; classtype:attempted-recon; sid:200011125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"communitychurch-my.sharepoint.com",nocase; http_uri; content:"/:b:/g/personal/infonoreply_communitychurch_tv/eburrky2tklimiiiqf0ia5kbbhkaxaypf06-08wf9wjebq?e=w5jmrb",nocase; classtype:attempted-recon; sid:200011126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"concienciapromocional.com",nocase; http_uri; content:"/ter/homes/twas/twa/internet/group/ac29e/sslauthui.html",nocase; classtype:attempted-recon; sid:200011127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"confirmsubscription.com",nocase; http_uri; content:"/h/y/b6733bec265eb698",nocase; classtype:attempted-recon; sid:200011128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"connect.collab-land.li",nocase; http_uri; content:"/verify?id=xkgcuxugkkypkf4ypmyujtmyb2wggmhxhb3zxxo2jirasq5uwcjm0xf5bebfkersfbxkw0p0qvea1thjhtk2fv1rnmbmnpcgcmaindnk3gopej1ks2flhde2gpqylfwg4yo9k35ebiait92u9x2ztym0tdsrdwgmontpoos7x0tluwdsxbyijwql3yngtqaj5cqcm9vzfep0kuiecacy5sac2n8j38jybd2me2bhh3ik1v0dawmo4a3cqiowpzit&callbackurl=https://prod-sns-sub.collab.land/webhook/onboard/discord/v2&connectmessage=connecting%20wallet",nocase; classtype:attempted-recon; sid:200011129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php",nocase; classtype:attempted-recon; sid:200011130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?.rand=13inboxlight.aspx?n=1774256418",nocase; classtype:attempted-recon; sid:200011131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?.rand=13inboxlight.aspx?n=1774256418&\;email=jackdavis@eureliosollutions.com&\;fid=1&\;fid=4&\;rand=13inboxlightaspxn.1774256418",nocase; classtype:attempted-recon; sid:200011132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418",nocase; classtype:attempted-recon; sid:200011133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&\;",nocase; classtype:attempted-recon; sid:200011134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&\;amp",nocase; classtype:attempted-recon; sid:200011135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&\;ampopensource:observable-35835700-0d08-4c25-a188-b8312ba00a941067515",nocase; classtype:attempted-recon; sid:200011136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&\;fid.4.1252899642&\;fid=1&\;fav.1&\;rand.13inboxlight.aspxn.1774256418&\;fid.1252899642&\;fid.1&\;fav.1&\;email=&\;.rand=13inboxlight.aspx?n=1774256418&\;fid=4",nocase; classtype:attempted-recon; sid:200011137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct/login.php?rand=13inboxlightaspxn.1774256418&\;fid.4.1252899642&\;fid=4&\;fav.1&\;rand.13inboxlight.aspxn.1774256418&\;fid.1252899642&\;fid.1&\;email=jsmith@imaphost.com&\;.rand=13inboxlight.aspx?n=1774256418",nocase; classtype:attempted-recon; sid:200011138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativecombat.com",nocase; http_uri; content:"/wp-admin/network/acct?email=jackdavis@eureliosollutions.com",nocase; classtype:attempted-recon; sid:200011139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creativeingredient.com",nocase; http_uri; content:"/wp-includes/images/verify/update/y.html",nocase; classtype:attempted-recon; sid:200011140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"creditiperhabbogratissicuro100.blogspot.com",nocase; http_uri; content:"/2011/02/habbo-crediti-gratis-sicuro-100.html",nocase; classtype:attempted-recon; sid:200011141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"criticalpointit.com",nocase; http_uri; content:"/search/sitemap.php",nocase; classtype:attempted-recon; sid:200011142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cshonest.cam",nocase; http_uri; content:"/webmail/o/webmail.php",nocase; classtype:attempted-recon; sid:200011143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"curtislibrary-my.sharepoint.com",nocase; http_uri; content:"/:o:/p/clord/eo0lfhtannnjiehfwx2q5o8b_lkpqdhacft8rkvqad2nqg?e=5%3aq65oiu&\;at=9",nocase; classtype:attempted-recon; sid:200011144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cusstomerservicee.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/fkmb2aq",nocase; classtype:attempted-recon; sid:200011146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/rkovyjs",nocase; classtype:attempted-recon; sid:200011147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/ukyxnmv",nocase; classtype:attempted-recon; sid:200011148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.ly",nocase; http_uri; content:"/ykyzhqu",nocase; classtype:attempted-recon; sid:200011149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cutt.us",nocase; http_uri; content:"/ebvdr",nocase; classtype:attempted-recon; sid:200011150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"cvxceude.web.app",nocase; http_uri; content:"/swmx/index.html?e=abuse@optusnet.com.au",nocase; classtype:attempted-recon; sid:200011151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dapp.accessactivationbot.com",nocase; http_uri; content:"/?d#wallets",nocase; classtype:attempted-recon; sid:200011152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davteks.org",nocase; http_uri; content:"/en/a1b2c3/025d8d7c10ab28b7bfb2aa3c46971513/start/",nocase; classtype:attempted-recon; sid:200011153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davteks.org",nocase; http_uri; content:"/en/a1b2c3/55ce56106657750d74e1aa116cd80ea9/start/",nocase; classtype:attempted-recon; sid:200011154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davteks.org",nocase; http_uri; content:"/en/a1b2c3/6fac1b731b2f4e41853c3c1a22a75947/start/",nocase; classtype:attempted-recon; sid:200011155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davteks.org",nocase; http_uri; content:"/en/a1b2c3/a51b82509e1a7333e8e8f3b5e6666e61/start/",nocase; classtype:attempted-recon; sid:200011156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"davteks.org",nocase; http_uri; content:"/en/a1b2c3/c3f764e6c620219e073821c9bb9a3b5c/start/",nocase; classtype:attempted-recon; sid:200011157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"demo.mobileappformyrestaurant.co.uk",nocase; http_uri; content:"/uploads/team/zxc.php",nocase; classtype:attempted-recon; sid:200011158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"desty.page",nocase; http_uri; content:"/eventpubgm/eventxsuit",nocase; classtype:attempted-recon; sid:200011159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"digisigner.com",nocase; http_uri; content:"/online/showdocument?documentid=1fce937a-ba39-4053-a83a-f07711ad8efd&invitationid=82f3e840-cd11-4da4-8579-304bd7e930b0",nocase; classtype:attempted-recon; sid:200011160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dik.si",nocase; http_uri; content:"/7p8ma?confirmation",nocase; classtype:attempted-recon; sid:200011161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dik.si",nocase; http_uri; content:"/dirbn",nocase; classtype:attempted-recon; sid:200011162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dik.si",nocase; http_uri; content:"/ot6v7?confirmation",nocase; classtype:attempted-recon; sid:200011163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dik.si",nocase; http_uri; content:"/tpjda?confirmation",nocase; classtype:attempted-recon; sid:200011164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"discrod-egift.com",nocase; http_uri; content:"/nitro",nocase; classtype:attempted-recon; sid:200011165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disq.us",nocase; http_uri; content:"/?url=https%3a%2f%2fpushrushed88.duckdns.org%2fredirect%2f&key=ulc_4epigzz16uwfb5b_yg",nocase; classtype:attempted-recon; sid:200011166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disrcods-gift.com",nocase; http_uri; content:"/discordnitro",nocase; classtype:attempted-recon; sid:200011167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disrcods-gift.com",nocase; http_uri; content:"/giveaway/nitro",nocase; classtype:attempted-recon; sid:200011168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disrcods-gift.com",nocase; http_uri; content:"/nitro-gifts",nocase; classtype:attempted-recon; sid:200011169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disrcods-gift.com",nocase; http_uri; content:"/promos/zuzk3qgcdry5fde4j7evxrgk",nocase; classtype:attempted-recon; sid:200011170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"disrcods-gift.com",nocase; http_uri; content:"/weicomse",nocase; classtype:attempted-recon; sid:200011171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"districtchronicles.com",nocase; http_uri; content:"/paymydoctor-at-www-paymydoctor-com/",nocase; classtype:attempted-recon; sid:200011172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"djstreaminghost.com",nocase; http_uri; content:"/asset/?/vrjkuzpmqtperpzckciadnhvzcjqggzimagkxhsucafvviitdwktkhcdbcogjvnamykzawtessrjsccekjuumbvfqrlkmg",nocase; classtype:attempted-recon; sid:200011173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/document/d/e/2pacx-1vszcwxk6nifthkg32wjxfjgq9yc-jjujkbsumqeeau8uw7xkcutyp0tbgux2mvwu8iqfrxxlunajob8/pub",nocase; classtype:attempted-recon; sid:200011174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/document/d/e/2pacx-1vt_xl-m0ff8yqqhzhgseahgwejo0znh9re6w0qvgbe0qfe084hrebjjg673htphdnvbcdnq6agehncq/pub?mobilelogin",nocase; classtype:attempted-recon; sid:200011175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/document/d/e/2pacx-1vth3iya0ov7p49rk9ejozgqnueuk8fna2mky389hertlwx4mnoyhl1mlhnwbz8sxnsqtk8i5uysmq68/pub?embedded=true",nocase; classtype:attempted-recon; sid:200011176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/18tk5qmpccb5nygfkfeo9xc5qowvffgdjvy52swoyhd8/viewform?edit_requested=true",nocase; classtype:attempted-recon; sid:200011177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1aegowsjpbld0rvgivurbyfidcqlg5v7z9i9ylo3bey4",nocase; classtype:attempted-recon; sid:200011178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1aegowsjpbld0rvgivurbyfidcqlg5v7z9i9ylo3bey4/viewform?edit_requested=true",nocase; classtype:attempted-recon; sid:200011179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1gs07chp1nmdlfpzzgcswjfzjtek057wtnfs8ws_jbky/viewform",nocase; classtype:attempted-recon; sid:200011180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/1htjqwgpnkonvm8dbgasjax8mkpu_pvnj0c71ttkfpn4/viewform",nocase; classtype:attempted-recon; sid:200011181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc-xysogohjsbzmcnoded8ooar2gz1c5zxobgk8envh3jbpow/viewform",nocase; classtype:attempted-recon; sid:200011182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc0yyqlieizg0nzouznvhsjfags1h9qi5hpdw3qlgbivm501q/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc4bagzjzmstbnjhy7zpy5zsx-xrn7reoouolv54luk5tihha/viewform",nocase; classtype:attempted-recon; sid:200011184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc8uc5aztlek3s6dqtk1etorhez5m2yvubyw5qmfkpisrelcq/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc_enqwhhv1jnvzy55mb4ghvjd4wcz9plnolh2eoitk7qgbra/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsc_f0pxmnwzrtbck6u06fdzocmhgzvjzlc8cu7c9b456fhccq/viewform",nocase; classtype:attempted-recon; sid:200011187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscaoiohhbm7suyz9ol9o9ueunbxn6donxrfjge2cevdw_8jmw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscbpunbcb6ubfnwjo9jol26cjvjjsvpzkz_wb9exxt9c7erdq/viewform",nocase; classtype:attempted-recon; sid:200011189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscbtba5srjedev4uvqq49pt3recywqah-ar5szplndj-dxhgw/viewform",nocase; classtype:attempted-recon; sid:200011190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscc98m5fw4ifog0zeiuquxitizmisrgsdvyxvtxsppunpkwzq/viewform",nocase; classtype:attempted-recon; sid:200011191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscclmqirehqtkm3vl4u9gm2zv6xfvrddbrgke9fmsfujqbboq/viewform",nocase; classtype:attempted-recon; sid:200011192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscd8t8sjgxqrsa6dq5kjpmrpsxkvi4bl38sfdu7wa3sl32elg/viewform",nocase; classtype:attempted-recon; sid:200011193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscda1to5ru4sjeeujg3ki2bimklprvsec6u43kpvhbfyhrldw/viewform",nocase; classtype:attempted-recon; sid:200011194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscda1to5ru4sjeeujg3ki2bimklprvsec6u43kpvhbfyhrldw/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200011195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscdct8mue2qq3syjr4tnntol30jfdk8vwpco6yjh7dxnq5nyg/viewform",nocase; classtype:attempted-recon; sid:200011196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscdct8mue2qq3syjr4tnntol30jfdk8vwpco6yjh7dxnq5nyg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200011197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscdd_tubfpkm0jll1tywsj0mz3khzpap1ty9xmpxxkczsz_8g/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsceoxsfawdsbd2r-jk2sppywnv1bchzjjcw2xkcj7oqkwqriw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscf9u8nrld-zvu6clr4jcwnw0buqrykdldtzoullbxy8kc1ta/viewform",nocase; classtype:attempted-recon; sid:200011200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscfh2njwrve6_rkxxy1yz83keoeekd4maqcnd-ivq7rkg0uca/viewform",nocase; classtype:attempted-recon; sid:200011201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscifaetukna0h2drveu7wergvzjmnx14_3ipulurmm9nehiba/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscirilop6_iti0zvvrlsbk8zfaeo-f10otlhj9k5liyervk4g/viewform",nocase; classtype:attempted-recon; sid:200011203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscjsewetq_v_cbpyh9dzjwsaoldxz2zx816022wp1vej8gv1g/viewform",nocase; classtype:attempted-recon; sid:200011204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscjtat4fmstlxz3hbfkg4qyi-epfdmun7_avcqwvgscoydytw/viewform",nocase; classtype:attempted-recon; sid:200011205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscjvnhykksssaw-kycyrl6ywg_r3fdjuyqhk2mrmxcpgwfxoa/viewform",nocase; classtype:attempted-recon; sid:200011206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscmzyecgbuuccfs_5e5axn9hpruzskqmvseedm0xz1qrqb5vg/viewform",nocase; classtype:attempted-recon; sid:200011207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscn6xxq_xvtivggy_4rkibou1i27e0kpiimikafpaavki1vsq/viewform?usp=send_form&usp=embed_facebook",nocase; classtype:attempted-recon; sid:200011208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscn7ak49mhqcq4zt-5tbwfhsjg8bewugtmusovrdyobybr60q/viewform",nocase; classtype:attempted-recon; sid:200011209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscndiqyfu0gtgwomcwsy-8nadvzgljrpdhkv6pedgh0avniag/viewform",nocase; classtype:attempted-recon; sid:200011210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscqbbsvkpxnasqgeazpzwxp1ln7qzdurt-nqn4azqa7q14euw/viewform",nocase; classtype:attempted-recon; sid:200011211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscrmsgjymaojts0bfneswvnfekiw6zya5rzyqoa1ydp5wkcrw/viewform",nocase; classtype:attempted-recon; sid:200011212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsctcubvufwru_hn5ukuc7-rtqhh7i0s9vygj7lje_943wyieq/viewform",nocase; classtype:attempted-recon; sid:200011213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsctmueyv-hoo8lvwjhptfnaht4ymn8cr3tnftbfnqmjb6xpwg/viewform",nocase; classtype:attempted-recon; sid:200011214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscuttypbph1iazuis8aa6xvrlmagwglmdcrrg8g2oymskvbva/viewform",nocase; classtype:attempted-recon; sid:200011215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscvqmhqgwbubzxdynzgvlbmmziyagdiadz2eyhc-s-ro8ndfq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscxgbsqs0_gphf4vziykyu_g5rgytw2s9fir3lyfar7kaixew/viewform",nocase; classtype:attempted-recon; sid:200011217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscxgbsqs0_gphf4vziykyu_g5rgytw2s9fir3lyfar7kaixew/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscxktatyielmhqxqqxtesa1ih5armwcrqy5r9-95cslplt5rg/viewform",nocase; classtype:attempted-recon; sid:200011219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscy0frglrf-omcz0vkzncs5vnnwg-sbnzhqxv7fhse6pfwf7w/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200011220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlscz4uf8dtvwhgxggkzsbbhjcgu9npgc6agxpy5o2fwpo6tv5q/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200011221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsczswa80hlvnpkqiuayjwbf8ha_rqzov0iiz18iixjatmqk9g/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd-bdmru2lv7bv1fk1mwwkxyrvf6uyx11zlly9k0j2gdse_rw/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd25a72pr1cbjbkeb0mvczkahjzp9pald09smfbp_oj7a3ktw/viewform",nocase; classtype:attempted-recon; sid:200011224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd26pifmynauv34el3gdnx3yzwdue9bannzsfcy7bdkyfotaq/viewform",nocase; classtype:attempted-recon; sid:200011225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd3x6brnru3toiionptordwmc4zorxcky1ebpmeg6bb4jfuca/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd5a68ino7qnojzidjg3eemyspl_vscjc06rtn1yjqnrewj9q/viewform",nocase; classtype:attempted-recon; sid:200011227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd7jgegqudsjg7blscqgfvdftyvlno6xreg6wjuxl0hnfbwtw/viewform?vc=0&\;c=0&\;w=1&\;flr=0&\;gxids=7628",nocase; classtype:attempted-recon; sid:200011228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd8vkw5fxeroe_pxa7n5cdfpukhahbg_7k7sg0iuosh_xsyoa/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd9poeb_wmgffgg8taw4z_np0kdbo32gr35k1zxizj7lcdela/viewform",nocase; classtype:attempted-recon; sid:200011230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsd_c4wpt0zzouwt5lr9p5kn5cylz3ananv1hlix6u_h36w1rg/viewform",nocase; classtype:attempted-recon; sid:200011231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsda4flfi-1_gvwqnbb1dcxz_mb5omo9t2oc-vslzfgh6avrag/viewform",nocase; classtype:attempted-recon; sid:200011232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdbgprbyowwcugqslasnoo-sbqcrgi6ppycsytvsw2_dwfeug/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdbiu6brbjaa5ubxpjgvu4xw3h_rcmowlzmqisj46e8rp9q0q/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdce9c1bqexlzlu9rojtuwtaatyeeshywbkmuiobrw_a-_mga/viewform",nocase; classtype:attempted-recon; sid:200011235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdce9c1bqexlzlu9rojtuwtaatyeeshywbkmuiobrw_a-_mga/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdcga7ojllxp3z9puyfumhvn7klcijhty86bmhawtv5r6wwqg/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdcznggxnwia2ct8kmxid1tdqhgerhnmixukxuj7nmq1lqsma/viewform",nocase; classtype:attempted-recon; sid:200011238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdf04avkjwvete8rj-wa3i7u6_8-orwqu-c-owvgb0nrxumga/viewform",nocase; classtype:attempted-recon; sid:200011239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdfarxg-0eurkyimsg-ukgl4mbtgvwfhe1wzbdxmb7oaosnyg/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdfyxb1kjjvkaiwbbpbgr0dfaq1xx2ehhzbxnt3adndssy1yw/viewform",nocase; classtype:attempted-recon; sid:200011241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdfyxb1kjjvkaiwbbpbgr0dfaq1xx2ehhzbxnt3adndssy1yw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdinjm_qvdbv3roybqi073rm1pujmrrs7lid7c3qk-4xwweew/viewform",nocase; classtype:attempted-recon; sid:200011243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdmjjljjfmjeijeyraxfm6pzupdbvoie7d_ussaqgqu2jh7zq/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdmsww4edj2yofwdenmvl3uvyibigishgajtsfa7chvcan0wg/viewform",nocase; classtype:attempted-recon; sid:200011245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdmsww4edj2yofwdenmvl3uvyibigishgajtsfa7chvcan0wg/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdnega_6c_pz9_q9ep9epm4iwqfsrxqsnaz-j9dyldimaoocg/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdplfokrnpmrpcrkjrxtvb7hv0nyzfocaudzkgzrftfbumaiw/viewform",nocase; classtype:attempted-recon; sid:200011248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdplfokrnpmrpcrkjrxtvb7hv0nyzfocaudzkgzrftfbumaiw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdrk4xndjat7qhzawgsc96chkgkg66dcwrujwfkgjhzkmzhqg/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdvwkczn_rxvn1522z1mcojbs40ymrctyizpyuv72_0wbypgq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdwbz5hapgqojwjyndeeyjxamg0wnaj3kolh3fb6xf4c-fxjw/viewform",nocase; classtype:attempted-recon; sid:200011252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdwbz5hapgqojwjyndeeyjxamg0wnaj3kolh3fb6xf4c-fxjw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdxm-rwnv41p3wdcbtetukrctoakvuoe1h_uy8jgnxy7kldza/viewform",nocase; classtype:attempted-recon; sid:200011254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdxupqc45v5krv3e0skzu03cm214ktma588b8afg1stpesclw/viewform",nocase; classtype:attempted-recon; sid:200011255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdxupqc45v5krv3e0skzu03cm214ktma588b8afg1stpesclw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdy1071rbhheyidjzo6fw5busqot5eunllw_thawo6udamfaq/viewform",nocase; classtype:attempted-recon; sid:200011257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdybqflfptobqslhflytic3g936bnojaljztk6ct1d5mjvnnw/viewform",nocase; classtype:attempted-recon; sid:200011258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsdzrubbm3nrqdzjs6q7phutjgmn-dm8zquphjg9ge31q7bdhg/viewform",nocase; classtype:attempted-recon; sid:200011259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse3-zgmg83lctfks0egmambwonybkscrvxix--n1azwngkphg/viewform",nocase; classtype:attempted-recon; sid:200011260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse5htthgifmniezokiypnjjhanvkvlehsrk9esgcpoauqutiw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse8ds15kxxdcrhfspcfrbvy6sbdhp0e4540zzmhhvzouewvka/viewform?vc=0&c=0&w=1&flr=0&usp=mail_form_link",nocase; classtype:attempted-recon; sid:200011262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlse_mo9pzgdahzdgz0wctr7lm0cqm_zwos8ljc4cqgtvnqfmfq/viewform",nocase; classtype:attempted-recon; sid:200011263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsebpakzyvtprhygwe23jlsdieyoca0jtiyy-f68nqwofparww/viewform",nocase; classtype:attempted-recon; sid:200011264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsebyedalhc7exqq5fljf8x1akbwz0h8l8ojbx5nx3go7bh3sa/viewform",nocase; classtype:attempted-recon; sid:200011265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsebyedalhc7exqq5fljf8x1akbwz0h8l8ojbx5nx3go7bh3sa/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsecilc_5ka58gxqjfrpwbfwmhykkdly-lwm9yubx1l1gwzgpg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200011267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseck8-g3um70ihw-ajfait5whcec3qdowobizswz8_-et_jkq/viewform",nocase; classtype:attempted-recon; sid:200011268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsedam8qavfd7nwszgyriuofus5xlgrvwcojm_8jtzpiw9ud_q/viewform",nocase; classtype:attempted-recon; sid:200011269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsedg-b07st85voaknpclg88z_zybaqffowcrxa-6eq1hemokg/viewform",nocase; classtype:attempted-recon; sid:200011270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseghb19gxs04xdkab1cubu6qmclhh_rpb2fwa8nwutpbwnkba/viewform",nocase; classtype:attempted-recon; sid:200011271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsegnx2irh_r_gtlspwo66pv4vkht2oobqmvjtvs4yqjj6vr7q/viewform",nocase; classtype:attempted-recon; sid:200011272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseht4cdltkad8967jjarcb5nafonbaw3dtpynth9mdk94hf-q/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseirld9oyigwxmec2bc-ax4yd-m-rhezlne00aminsjf0uteq/viewform",nocase; classtype:attempted-recon; sid:200011274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsejavlqdkikylynqlg6p7kyfu4qnlyy31opnfttucuhgmek4a/viewform",nocase; classtype:attempted-recon; sid:200011275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsejzzt0w_l58kpcmcq1bseqi53i0retcnl0a1-uldxvnyz-ka/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsel8uq3oplbpuz97bjyv7s-6wdghzjiaiauioimsb9buzjfuw/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsemwyrvcln1ql8uxd0dsiswveuehikz5hwalfeni7jjfaefmg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200011278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseolfabczafsd751fzkc24ja9s2plxa1zgv1zwahscnr_knfw/viewform",nocase; classtype:attempted-recon; sid:200011279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseolfabczafsd751fzkc24ja9s2plxa1zgv1zwahscnr_knfw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseoz9zpmm0c0fjksklv-p1hsrwsuybmj6bvbd_fkewzzcv_ea/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsepe4jevfm3mjc-vndxuq_9wjpc7afrjadkxvp8czawh27cqg/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200011282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseq5h3-5stw3bwnpoi6g-gfwcgej7q82incdm01dd1lf182iq/viewform",nocase; classtype:attempted-recon; sid:200011283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseqdx2wgybdxlhascsuopq1xqsmwrxjf4erl_cpmvtt96dq_g/viewform",nocase; classtype:attempted-recon; sid:200011284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlser-b6q--nvif2fj7nbn88dh8lj-s2yfbgjyuygwsacbhm6lw/viewform",nocase; classtype:attempted-recon; sid:200011285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlserwgqm-czpabole0qw-jg4bhicctqdjm3ex3v4vzifj5wldw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseszgantjzuxgteg0dsiizzmadcwjbjqcsri5nidod2rd2_lg/viewform",nocase; classtype:attempted-recon; sid:200011287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlset42bzecl3yrdnnffv6f7kecxpd1sy4rbh3h3govwg1k1z1w/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlseumxp-wga1x873upqxmi_hx8nbbllh12zzmxia1xuqp2mgbq/viewform",nocase; classtype:attempted-recon; sid:200011289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsevpkt1byhl-oqjptw8wbecnm7-iqnax-mz8zd-mxp0fol3jg/viewform",nocase; classtype:attempted-recon; sid:200011290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsewr7-ksdpydhc1tv8tkcxrlad8zrf3q_uqt-rj9a_fmmzxya/viewform",nocase; classtype:attempted-recon; sid:200011291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsewr7-ksdpydhc1tv8tkcxrlad8zrf3q_uqt-rj9a_fmmzxya/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsezbbqgms0nnvgk6aq0xz8sa19zyd8w87c8js99mpi3go1mqg/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsezxizhvg-i28_n8fyddanndnufw9veep4kk934yekxvxdmdw/viewform",nocase; classtype:attempted-recon; sid:200011294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsf-exsf9vm0rleksdp46wa2dfca3dhphayf4tl4rktjvmgguw/viewform",nocase; classtype:attempted-recon; sid:200011295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsf0appdcwb17-g15hxqlvwdz2cngcp90uuisclz55s2volujg/viewform",nocase; classtype:attempted-recon; sid:200011296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsf32hx6ujsi_gqji38udpamxxxnhyrx8qhmqcqnteinj_0cmg/viewform",nocase; classtype:attempted-recon; sid:200011297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfacaqo8c7hsu7mr6zkbsfulv8m710ke2qna_7tyusomgmtjw/viewform",nocase; classtype:attempted-recon; sid:200011298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfacaqo8c7hsu7mr6zkbsfulv8m710ke2qna_7tyusomgmtjw/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfaekglhjlubx-j0s40wtk-dntowamok2u3dl24wdxhni6cuw/viewform",nocase; classtype:attempted-recon; sid:200011300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfdy4lqz9cxxc2z-9qldm8asxoikrw5w_jb9d0iciiyy_bpbq/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfe2ymhbjhlp2njbhcnyypkh2q_svr-hjv6jakyhkrcvnrfhw/viewform",nocase; classtype:attempted-recon; sid:200011302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfeoy_w3jwkkz8psgsw4nrja9tmg2lx0x0nvtmv38k0hjzzmq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfesajj9-epeg0p0pdzfaf3xooefbwmwsn2jne-6doh86mocg/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfetregzccisehncfk6344jq5ab3iq6ft0a6k_v156sh5j24g/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjchag9rs_yczr5hheyuc70ukrtaonxwdhxso7_qhcpp04lq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjpx-sxpejnp_q2fmfu0jy8oqoesrx9wbrqplcychw9luupa/viewform",nocase; classtype:attempted-recon; sid:200011307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjsgjhbjke-mlmni8cfg1tacz-hdpvmy5j2br9upjr1f7nda/viewform",nocase; classtype:attempted-recon; sid:200011308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfjsgjhbjke-mlmni8cfg1tacz-hdpvmy5j2br9upjr1f7nda/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfk9hpkld9-qwaxs8b0cpslaw2-oomu6bcwpxkmp-fo8kr3ew/viewform",nocase; classtype:attempted-recon; sid:200011310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfksirdejkit-tdeiwrnkf00ygsqdsqth0hmwydiqdik10tna/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfmppmwkaythtoskrsm7wewzrcamfxbeyuc6f1ewjjmzisfwq/viewform?usp=pp_url",nocase; classtype:attempted-recon; sid:200011312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfnjyzbmw-pd1byw4b4opoksx2cealounsnhg5fjc3fk1qocq/viewform",nocase; classtype:attempted-recon; sid:200011313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfnlsbejsiacubkj2geltmn7slefoweeczuagp3jfmfkijg4a/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfp1eukgsktriyraz2csynqwfwtv6ehlnbszu69dbxz9lirtq/viewform",nocase; classtype:attempted-recon; sid:200011315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfp1eukgsktriyraz2csynqwfwtv6ehlnbszu69dbxz9lirtq/viewform?usp=send_form",nocase; classtype:attempted-recon; sid:200011316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfqf7_zc-bsb7ej4d_rikrhb3bi-o15o1l1lsa-dw0nr-pztg/viewform",nocase; classtype:attempted-recon; sid:200011317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfrzt6zpkhgtvzqutkypqtjffxaucn3evqpf6ytbqug3t41yw/viewform?usp=pp_urlorganization",nocase; classtype:attempted-recon; sid:200011318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfsia_g4fb5yg_cu8fjuxcndbgqz1setzfedm0cw0eaonb57g/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200011319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsftriyys-rvphnbmh6v6lyimxjy3rpog8xvtb3v1agqhawiva/viewform?usp=sf_link",nocase; classtype:attempted-recon; sid:200011320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfwdsuczwrih_wnciwh_qjpg1v5p-qk8zyjjoccpbhmyeygrq/viewform",nocase; classtype:attempted-recon; sid:200011321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/forms/d/e/1faipqlsfzhyjvw1nn6bvqhbwmd3rcrm6gukuzir5u9tmsszmcrr8nyw/viewform",nocase; classtype:attempted-recon; sid:200011322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vq2ztf58y61wm6tfqlckdhzgwdf4i8h-swscxbfia41dspjl9pzjvoelqnejj6lf6krkmwsjpusbq6c/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vq4a2x3au84uay7ywvdh0tmgmqm3spkjigovrzcljfeqpcz3bochdx_kr-nv7fs_c-k5b3gwcpw8_i3/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vq5dr7ajdkfwicg5n2lbhbfo85bwvgageeqmuvllkwg5i2iuhekmsvmwotev1nnzoy8xasnxerngqew/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vq7oplr_-m2wcmmli5bewiwc-vkkblykry1ejy1vfvkm6c-yanjplkligavkr2dt8vkw6dmpyzkp_ki/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqcd_0hwhad5zgos5tjutaiy-2gqv0yywq2x6vukv1xorguqapiqen-hucsci_xmlrqdh8bq4jimilo/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqfy0klc7lmimfug7xrvape2jdz8153ptionyg7ht7va1ggm5loptsqunpgtiwn36i9y8ggrat6f7ka/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqljiqoxuypxg7a8r5x7frbq4cqcvnb77n155fzyxweegqibwjyjnpghjky3howsxyb0pe3g2wm_xpm/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqnznhj44-ac6cxetszlub1jxy1o9aq4xl0qmqs7pmlzbyhgxk8rb-urc1oeiycp2lw5f1k7h4c8kha/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqo0xukh2wuts-r_jah5nfa3jsnxxdkgvfcafnigv47ptitu24xoqtt_fhtwbm1p6wpz5ajydo3ho9-/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqo0xukh2wuts-r_jah5nfa3jsnxxdkgvfcafnigv47ptitu24xoqtt_fhtwbm1p6wpz5ajydo3ho9-/pub?start=false&loop=false&delayms=3000#slide=id.p",nocase; classtype:attempted-recon; sid:200011332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqomduzhks2-dxnwjehoup4sbhlxgnzea26e9wgdiqfge_6wlyakiqjemaccbqabn8zyfmkkdyxwvqd/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqopq9v2asclxkhw1tgkr3v1no0smckg8as4x6t4cyhuszvfjkaosxhp2phofsyb8ag0f-anei4kzqb/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqv9kqkp3camf3xmyttfnsjxyujbuvepsw5xxgehw9pbsde3gultt5drujp3npi_yzok-wn-lcr1ayf/pub?start=true&loop=false&delayms=1000",nocase; classtype:attempted-recon; sid:200011335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqv9kqkp3camf3xmyttfnsjxyujbuvepsw5xxgehw9pbsde3gultt5drujp3npi_yzok-wn-lcr1ayf/pub?start=true&loop=false&delayms=1000&slide=id.g12c369a260d_0_0",nocase; classtype:attempted-recon; sid:200011336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vqx_zel_kuemn6sejjmr951m_x6bzzai7iqp25hfj909xoffbtw822kfnfdpl4uarmqcjov-ztc9m0l/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vr2rfg3w3cgddjzrcaae3puzl-3guk4gzaxim9w1mjdgrlw-q5ozx3har_80bhbjzdhuqprxhcggkea/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vr3b_nkszda_oee0g3qvfnogiszeqmqybwq98nlsubiygi77s2atc56yjmkt_rovdkft25etpajz3qa/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vr9-lsrj6_nvycfovz48plsmxpdnx6snwn2k7_7d9pi5hsssa0awtcfzkkwm-bj9bpdg6df1rcbl_6a/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vr9_x0vba6pd6dsknaqedojbb9a27bhfs_rxknbaftzqcq2ifpl69lnlitphgicnv5jljxudymwf2ds/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrbxkfgdr2nzlinirgq8rlg-c4yrnkot-w6jhobuywlret4a9vemxby6-49qcd7m4gy3zifwn1ac6qp/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrct7eo4hzvmluoene97hoc1_gakm_liize_f3bvw-zs0bahnpvtayox219anfnhd-jr_eqeuq2a-1s/pub?start=false",nocase; classtype:attempted-recon; sid:200011343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrct7eo4hzvmluoene97hoc1_gakm_liize_f3bvw-zs0bahnpvtayox219anfnhd-jr_eqeuq2a-1s/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrgv40o-9hv-h-te58y7dluzlgkiq2lgps9rphybq5nrrnwau-nlsnedjuazhprry10otfrh3_iq1tp/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrhd7uwvdnop9fboyrdiogituiy9krhaoohqgun7mcounyrangi25ym3zqyfs_06ljmdoro-g2k1uy7/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrhd7uwvdnop9fboyrdiogituiy9krhaoohqgun7mcounyrangi25ym3zqyfs_06ljmdoro-g2k1uy7/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vriyg_oiukpuguzpg2epbnyy4qjmk1v3maunksjuumfujoeerubxylo9_hltssk-qv7jsrfqfppdcgn/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrkcy9vujjnzxs3sk2xb7e1zfnaaeo1-abq1hmre2_gcsojunz-ktdwlqwr_c_0gjclmsll8ov0m5z2/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrkxgaxdyjorvbbxqiiuewjyfaf0yfrxxpukotref78oszc97blricxkmgqp47gfvgr9mdyqunl4cl7/pub?start=true&loop=false&delayms=1000",nocase; classtype:attempted-recon; sid:200011350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrl1ylbscadiuntrkeq5xe_bz5zwgfjgao5atkkbeidhn_aqqyspym3hagxsqckazae7pwdwtgkfkvg/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vroaieaukr267ast1spbzxkx5pnitrr0lxgej7ot2-1pxw7bvmgbezxkpskife8okadekp6khttgl51/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrp2k-b45tcwcadgwzkulyaqrs1f9vfjs3y19o6fs_7p34ymzwuascr7lkuijhc83-o6fmsbbvehcf2/pub?start=false&\;loop=false&\;delayms=3000&\;slide=id.p",nocase; classtype:attempted-recon; sid:200011353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrrbkktbsjl0p2tdhjzjo2uawkvwbwipzqv2sgbcl7xpkns2l-hixlz_bwi0cstwntvcxq1a5r1lj4x/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrriatvgvtaoki3lje5es155asdvvgmqqjoosenskwwiutrtwubnfwgosjeuupxd5oda3gx6hbdaslk/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrseayhk56elaa50etoftyvdya-x0ahondcdrb4-4q2istomduixprhiqod4x03kkzlq8nmlqareflb/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrspim9ofgbvqgviwopvx12axuwgrecah6v__lwfyym879uia1ajcutce1-gpzhcody7jjdzhhnvh2g/pub?start=false&loop=false&delayms=1000",nocase; classtype:attempted-recon; sid:200011357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrtjoyeuu01v67utwhbvddv24xpmzymf-i3ajwxvns4ioih0rqjiiwtimmhg3jikkuaw7fesnkiblfq/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrtqnkpg6iuhiebu4jsuo7uchiwlv8o_t04w9wo9jasacamr0f7xllpl0kwgfcjxx04beg50ddbbwf2/pub?start=false",nocase; classtype:attempted-recon; sid:200011359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vrxbgdmwme4f-6mqshtl97vzxopdcl-qryrgiqp67lb1apgnqiohuhs9cfsadfmzpcnskxeag12uhds/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vs0oubelzncmhjx-ytilzij484fsob8n1aoxl_kmhwu35taqzus8jru_agjn2ikxdhc_gliie5h0jdr/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vs3tzy7hkkj_csrhj3gdjz1ran_zcnq6xpypttgyznz3bzgnxj9xyrngmqizegktinhkxwtjzmsoepj/pub",nocase; classtype:attempted-recon; sid:200011362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vs4t3osol5-a2tlqhpxcbnoykx-v0xpvbkex3ikocawxpr1jez_fqk0zq8ylq7w8_4du3b3z57qhj9r/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsaurcbkgotvetgybq_u2otlb_oqpfindhv0aekotsbrzwcv7p-2gr19c6otq5sgcv4wkzd_ze21aov/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsbpq0kgskm9swx0q69pkai0rj4czxsf3uhpobwhexasvcgmootqwagsskuq4kqeak33lfky5qotwtj/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsgw9oh1ixw4dhkvxkwxlwsu7de-mla1kkntrqmjmqiy0zicd42e_8eakt3kiywvfk0vrfexpkcjlmb/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vshepsbffhkicfyopfnmyct8hasbtfbdqmx21gohmtd_7z5wj94lipbhvgcvz29xnnfcpejvdcf5_2m/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsi1bfbs0dm2wovmusqhcznjoni_s6p2agvk_00rfab3_fzjftelemvd_o17_egackhombzcoish6ip/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vskgwhr2flv0fouv_mac13jdyp5a-drx8tnnnd4soc852jjodbgozj44z7_9v5_0xlktsc10xy93zgm/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vslpj7pk4-axbccjqtpblesxanwetmsmefuchs2sloxncmvllwzftu83w_w_uia1mjemn717hwpcfnq/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vspnbijel3trkgiucqlxf7ozncbv8afgi8spwy1we3rmyp_degyrb8lt2euqyscu25c3ow_qsaa4qqd/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsq3l4usd2whnm0lzdr_mmkaae0lqvza_lbeollywk1lyhgzyjzyyny0go8p9ev2kkvwr8clj-0t7da/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsrkwcbk38uu0ysrxkewjg2ca6ciytn-8ey1utn0_kymu5paq7tkgg4dfahoyjr--uhz02inedfyl92/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vssxayagcehnojap_9vi4vkx2fwqtkzpgwviy2j2efosj2xfmvqmsyv1avj3eclx5wb22joceezc8t0/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vstqki4nnnyrhsn5l0tj0ec7y31bzuyy4tndmtidtdxtpbnwjjrb1nj5rjx_04hmctvvf5iu4yxhjx8/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsx8ahrvwaowtfdbywictcemrz6z1wlqenjtp97v184yas9irqjz2-axi0yov-zb9yo2o5rwe4c50hi/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsyhwcm0mdnj7ukwpqxw9t5pxb0pfavupv6xzq2qzdaynme4dlvf_x6zipvbvs8apohuptxvz-pqodb/pub",nocase; classtype:attempted-recon; sid:200011377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsyjh3oqjp_mkyqdaub6tdi-r0ern7crtrrkktdqq6uzvearmeidpgrwvued9lf7jirwkvoi8s63qn2/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vsziscptadt9xw5d1zn1nj0roql2fu4l05w2upslyhwj05z8n5s4rzjjc07hwm_ry3a8gaw86qwsplr/pub?start=false",nocase; classtype:attempted-recon; sid:200011379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vszmxwf77cx9jec22hwonfd-l1fnnca3x407pvkw3_aanghjmyvustququfenxznzckxgaszizaop76/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vt4s2anscxr6ygbumfcqq5itvnltzfnlm0pocpf1qiwvdqwvmjwp-ri4cjl4jgzkmuk0f9hdvf3rclj/pub?start=false&loop=false&delayms=3000&slide=id.p",nocase; classtype:attempted-recon; sid:200011381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vt_vozpc-fsi8conkyuniqch84yuv1vemigjqyjlo4xg3k9vbwid4-12jjlzjf4ms4v9t30tnfcx_wu/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vtejvm_urscgm4l2fhqauhj3zbgy2efdrqan3jfelqosuqbmhodxzjfc9mezdezg3lbhe95behy6now/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vto_kd-0pp7wh-dv8gouhwjouimjzk9ajr0geucjsh6ih0rtxzyatmm3rppqkaryc_gl5yeub_mada5/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vtqkfwcb3oadgmcybxj6t7z1qijgunchlbk4bj7rcgeoorpjdlfplrf9yamxu-dfambqst-duk3n36_/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vtvd5owwxfj_imvugtxzexjyooysgbvmnrrv5wzklptgxkeo9qpya2rosjr4ldfprpsgjtt961xbovw/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.google.com",nocase; http_uri; content:"/presentation/d/e/2pacx-1vtwkjwy3_-kl8f5w9p6a1topb1ob0r15tijqhclejlxmwtsicqxiktafoxdxkehh4tlvfye7c6xs3og/pub?start=false&loop=false&delayms=3000",nocase; classtype:attempted-recon; sid:200011387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docs.transactional.pandadoc.net",nocase; http_uri; content:"/c/ejxnt9lowzaq_jr6jcpxnoqhdxrkjuoliccol2ptr9v0ciljcotrcsuqskvv7mh2zuejdfu-a4prxlbl22l1dknw5fpnfzcu_rjhgwekqtjlneqau5upway0l1src1eaiajqyijpdob7mlfpprymhxgltjvtj5fsk0bdrdgsmiw1fe4jlihthiuzz8wuponxscag6anwd2facqi2mxb9rjxp-fuq6lo_vdmee5sm4yg-pperbxtgorogbj6vnleuseckmmzebgavykymacmgfdpc6c9t4sdzvnawzi5vc13pd_olrcwfkvcbdq36frthtokmde1eo8hvk_l0bbkrx_uzcggtyv5d-tt-7stge9p_ojbyisrxjbqdwywur3djrtrunvxyt5s2e9d3y-2c06ufis_wugkpslplrcks_wyb8jdm",nocase; classtype:attempted-recon; sid:200011388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsend.com",nocase; http_uri; content:"/view/3a5r5a92ssx38jsi",nocase; classtype:attempted-recon; sid:200011389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"docsend.com",nocase; http_uri; content:"/view/7kbaanzkgswcge6a",nocase; classtype:attempted-recon; sid:200011390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doctricant.com",nocase; http_uri; content:"/lam/5a86b3fb-4213-49cd-b4d6-be91482ad3c0/47a37ff0-679c-4168-a4cf-95f802f3f35b/95a13b52-4e8c-47b6-a01f-496a2e2b38f6/login?id=yjnhcxrpbgtdvxhcefy4v1rzwjvyrvbon3hjky93uitpb3nan04zddl0bvm1wdjsvkpxodhdvlyvq2czugndemlwwwxscjk1ctmzmjnmehvqmdfsull4zhu2ohgvz0zjec9gy2dnbutodxbxngjlbln2qkn0cfdpd2j6mfdlvel4tmdrrthrvghddtzznmrywxnxu2s4ttlmajlpuvc3dtvwqnn0wghoswhhswlrnkvvrdrzvzhlzjh5bk9ubefqeje3utfymxm2s3plnzlmblrirms5u0zmwhzkt0t1l0tmwkvktvdubetavevuzdbvctdvcfu4aendyy9fcke4bvvackh6mzlozmtdk1m4uyszuhz5rdffc0dswxlul2jtymnjc3hkdtzoyy9qaettng41adzvtflkzkizwuy2rgtrawjqwlnhugdwa3hhyjrqwxqzmg5pcvl6zm03eljnvwzkqjb3z3lkdni0pq",nocase; classtype:attempted-recon; sid:200011391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"domolmarket.com",nocase; http_uri; content:"/cree/",nocase; classtype:attempted-recon; sid:200011392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"donlunarestaurant.com",nocase; http_uri; content:"/wenetttere/",nocase; classtype:attempted-recon; sid:200011393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"doufatin.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/19zpw90jgon3j5merxi1pauvkjdmx8nfq/edit",nocase; classtype:attempted-recon; sid:200011395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1bcdyitw2vo5jp6yrbdmiy8cfrkcf4tby/view?usp=drive_web",nocase; classtype:attempted-recon; sid:200011396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1c5o9_y8_octsepwyojfarn1k-kj4d9fe",nocase; classtype:attempted-recon; sid:200011397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1fdgs5g6fqqkudcl2meym63ua3yu0o-tb/view?usp=drive_web",nocase; classtype:attempted-recon; sid:200011398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1fsvmjkcq7ennrsfdufkcxshfhnda_fui/view",nocase; classtype:attempted-recon; sid:200011399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1ginbnlpvt7kpfnog9a68fqmn7k3aivui",nocase; classtype:attempted-recon; sid:200011400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1hdvx7j89h5l7yz39idgzhqji93jnkl_c/view",nocase; classtype:attempted-recon; sid:200011401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1jixb69t_nw9tmkhvfrejkfzof3d-ijet/view",nocase; classtype:attempted-recon; sid:200011402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1qf58h-1lunq1pubplwdhwd3uooj_vjxa/view",nocase; classtype:attempted-recon; sid:200011403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"drive.google.com",nocase; http_uri; content:"/file/d/1robiosanbh8doqa7yuiewn3akz4094ho/edit",nocase; classtype:attempted-recon; sid:200011404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dweb.link",nocase; http_uri; content:"/ipfs/bafybeih4kiqh2vg5tezrl2etecnn65j5jm4lrwswnizojuwxszkbftn2zm",nocase; classtype:attempted-recon; sid:200011405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dyantra.id",nocase; http_uri; content:"/r.html",nocase; classtype:attempted-recon; sid:200011406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"dyuvstyfawecteraw.blogspot.com",nocase; http_uri; content:"/?ref=agfuc2pvzxjnc0bnbxguzgu",nocase; classtype:attempted-recon; sid:200011407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"east.exch082.serverdata.net",nocase; http_uri; content:"/owa/auth/logon.aspx?replacecurrent=1&\;url=https%3a%2f%2feast.exch082.serverdata.net%2fowa",nocase; classtype:attempted-recon; sid:200011408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eeverywhere-my.sharepoint.com",nocase; http_uri; content:"/personal/marco_eeverywhere_com/_layouts/15/onedrive.aspx?id=/personal/marco_eeverywhere_com/documents/documents&\;originalpath=ahr0chm6ly9lzxzlcnl3agvyzs1tes5zagfyzxbvaw50lmnvbs86zjovcc9tyxjjby9fcwhvbeq1x3hltknorzbdmdvvmgjvvujoy1z3b25futjvejhtlwxqrg9svwvrp3j0aw1lpvduaunytfu4mlvn",nocase; classtype:attempted-recon; sid:200011409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"efax25042022-webapps1-1311433986.cos.ap-chengdu.myqcloud.com",nocase; http_uri; content:"/doc.html#test@test.com",nocase; classtype:attempted-recon; sid:200011410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"electricrctoys.co.uk",nocase; http_uri; content:"/product-category/novelties/",nocase; classtype:attempted-recon; sid:200011411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"electricrctoys.co.uk",nocase; http_uri; content:"/product-category/ocarina/",nocase; classtype:attempted-recon; sid:200011412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eleoelswka.blogspot.com",nocase; http_uri; content:"/?m=\;0",nocase; classtype:attempted-recon; sid:200011413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ellatinodigital.com",nocase; http_uri; content:"/wp-content/klo/",nocase; classtype:attempted-recon; sid:200011414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"emea01.safelinks.protection.outlook.com",nocase; http_uri; content:"/?url=https%3a%2f%2ftilbakebetalin.wpengine.com%2fsw%2flog%2f&data=04%7c01%7c%7c11af7bbcb8534b33863408d9e17cff46%7c84df9e7fe9f640afb435aaaaaaaaaaaa%7c1%7c0%7c637788749239190942%7cunknown%7ctwfpbgzsb3d8eyjwijoimc4wljawmdailcjqijoiv2lumziilcjbtii6ik1hawwilcjxvci6mn0%3d%7c3000&sdata=wyye%2fyjymouztvtdzw%2bfpfpyzj4nrvzhvloufqhq128%3d&reserved=0",nocase; classtype:attempted-recon; sid:200011415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eneeeetsowww.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ersfilter-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=t6t%2fhn1dkbyhlyx%2beimbazufa43rrgz6%2faaaewnocdi%3d&docid=1_18168db23429e45f29fdf2e7be120efc4&wdformid=%7bb9970f62%2d44c3%2d4d09%2d9929%2d6e1eb652da57%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200011417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ersfilter-my.sharepoint.com",nocase; http_uri; content:"/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=6ywmlbqi9%20sjfgzhadhvte2gyowjf83iqbjrjehik4s=&\;docid=1_135f7008dfbfa44e6b09dab0eb165b997&\;wdformid={e037f2d9-5daa-4916-ba03-eb11d0aa6dea}&\;action=formsubmit",nocase; classtype:attempted-recon; sid:200011418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ersfilter-my.sharepoint.com",nocase; http_uri; content:"/personal/nradonich_ersfilter_com/_layouts/15/wopiframe.aspx?guestaccesstoken=6ywmlbqi9%2bsjfgzhadhvte2gyowjf83iqbjrjehik4s%3d&docid=1_135f7008dfbfa44e6b09dab0eb165b997&wdformid=%7be037f2d9%2d5daa%2d4916%2dba03%2deb11d0aa6dea%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200011419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"esa.www.wamodshost.com",nocase; http_uri; content:"/v1/app/gbwa/image/transformer/4573be1d04074ebfab8fbb16f21a65de",nocase; classtype:attempted-recon; sid:200011420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"etfiot.com",nocase; http_uri; content:"/order/ex6myy",nocase; classtype:attempted-recon; sid:200011421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"eu2.contabostorage.com",nocase; http_uri; content:"/17369aa91d5549c192b0f736d5822403:rr-frontpage/index.html",nocase; classtype:attempted-recon; sid:200011422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evernote.com",nocase; http_uri; content:"/shard/s339/client/snv?noteguid=f48e12fd-48da-e57f-8e76-cdf6e4054e1d&\;notekey=02a9fa6bd051dc6b4581ee3b617b3f88&\;sn=https://www.evernote.com/shard/s339/sh/f48e12fd-48da-e57f-8e76-cdf6e4054e1d/02a9fa6bd051dc6b4581ee3b617b3f88&\;title=optus%20webmail",nocase; classtype:attempted-recon; sid:200011423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evernote.com",nocase; http_uri; content:"/shard/s446/client/snv?noteguid=4dc119ab-57d6-b8e0-4fcb-c11c0a637b94¬ekey=9ddb3753cb700b0c86a78176be71f4f5&sn=https%3a%2f%2fwww.evernote.com%2fshard%2fs446%2fsh%2f4dc119ab-57d6-b8e0-4fcb-c11c0a637b94%2f9ddb3753cb700b0c86a78176be71f4f5&title=you%2bhave%2breceived%2ban%2binvoice.",nocase; classtype:attempted-recon; sid:200011424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"evernote.com",nocase; http_uri; content:"/shard/s446/sh/4dc119ab-57d6-b8e0-4fcb-c11c0a637b94/9ddb3753cb700b0c86a78176be71f4f5",nocase; classtype:attempted-recon; sid:200011425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"excelelectrical0-my.sharepoint.com",nocase; http_uri; content:"/personal/tim_hansen_excelelectrical_com/_layouts/15/onedrive.aspx?id=/personal/tim_hansen_excelelectrical_com/documents/open%20to%20view%20shared%20document%20in%20hitech%20sharepoint&\;originalpath=ahr0chm6ly9legnlbgvszwn0cmljywwwlw15lnnoyxjlcg9pbnquy29tlzpmoi9nl3blcnnvbmfsl3rpbv9oyw5zzw5fzxhjzwxlbgvjdhjpy2fsx2nvbs9fa2zoazdydndfaettvl9pwulkctdzmejlveeyr3awzwjnsdfkrgdjrfdfttznp3j0aw1lpunrvevzrwxcmlvn",nocase; classtype:attempted-recon; sid:200011426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"exch.quantserve.com",nocase; http_uri; content:"/r?us_privacy=&\;a=p-w_ayumw3pzr2w&\;labels=_qc.clk,_click.adserver.rtb,_click.rand.60541&\;rtbip=192.184.70.137&\;rtbdata2=eaaaiencvf9odwdnzxrzx1e0mjfftwfuywdlzf9tzxj2awnlimofncj-jtiws_b-ohnodhrwczovl3d3dy5syxcuy29twihbt0llsefpmvdcvwi0vmdxvi1julfbztjdullinvfzuuitwjdutjfpdu3bfukaayfd3aqeoaebqahv4fyeugeawahq-aniadv5u4til9obfllxavhtz0fpaghnqs1sufktuvntqkhlaarzydroawsyaviznracclocbmc4ronaagliagdqas7hhvv4n_fmqqhgagdoagd4agckaxywlnb1yi0xmjyxotkyndq0odazodc1mamaqamasgmejmh7angd_dgd4gmpcc13x0fzdu13m1baujj36gmfcngfefryawu5mjeymfgdaiaeayoedxf1yw50y2fzdc1xyzhybajvuw&\;redirecturl3=https://www.cbtnuggets.com/?utm_source=quantcast&\;utm_medium=prospecting&\;utm_campaign=general_us&\;utm_term=testimonial&\;qc_campaign=cbt_nuggets_q421_managed_service&\;qc_adid=2078771",nocase; classtype:attempted-recon; sid:200011427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"explorebathurst.com.au",nocase; http_uri; content:"/rrefeeieoj.html?erectrcsq@*cthiytvcdx$zsxycuikjmkjivee$terdtygjyvtrre",nocase; classtype:attempted-recon; sid:200011428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"facetkt.com",nocase; http_uri; content:"/updates/wb/index.php",nocase; classtype:attempted-recon; sid:200011429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"feeds.feedburner.com",nocase; http_uri; content:"/investorway",nocase; classtype:attempted-recon; sid:200011430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ferrumtransport.com",nocase; http_uri; content:"/vgfyz2v0tg9bpuytype33554433vgfyz2v0tg9bpuytype33554433/",nocase; classtype:attempted-recon; sid:200011431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fincloud.center",nocase; http_uri; content:"/client-portal#/finance/deposit",nocase; classtype:attempted-recon; sid:200011432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/aspire-127b7.appspot.com/o/dnd.html?alt=media&\;token=58da9567-441f-4f7b-bf07-290e808e5d8d",nocase; classtype:attempted-recon; sid:200011433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/aspire-127b7.appspot.com/o/dnd.html?alt=media&\;token=58da9567-441f-4f7b-bf07-290e808e5d8d#hughesmichaela06@gmail.com",nocase; classtype:attempted-recon; sid:200011434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/cardilogist91983.appspot.com/o/index.html?alt=media&\;token=40dc7341-52e7-495f-8ba3-04f739b67ca0#@yorku.ca",nocase; classtype:attempted-recon; sid:200011435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/dr-clin-c4f68.appspot.com/o/drweb.html?alt=media&\;token=09293ba9-0738-41ea-9cf3-67cb43af2b88&\;x=famacas-cfa0appspotappspotmacas-macas-vfwefsaxsppspotcfa0ps&\;prox=p2000isolation@aaa.kr",nocase; classtype:attempted-recon; sid:200011436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/dr-clin-c4f68.appspot.com/o/drweb.html?alt=media&\;token=09293ba9-0738-41ea-9cf3-67cb43af2b88&\;x=famacas-cfa0appspotappspotmacas-macas-vfwefsaxsppspotcfa0ps&\;prox=yourname@yourcompany.com",nocase; classtype:attempted-recon; sid:200011437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/jonfrnogomint.appspot.com/o/jonguyvupvipshi.html?alt=media&token=2528c54b-142c-4e25-b0a9-03affa618055",nocase; classtype:attempted-recon; sid:200011438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/nnnnzzmbcmmm.appspot.com/o/index.html?alt=media&\;token=ff8efd0e-8cdb-4767-998b-f421eee08f97",nocase; classtype:attempted-recon; sid:200011439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/okorocha-9d683.appspot.com/o/indexxevol.html?alt=media&\;token=f9ee1486-b8df-4f55-8b9c-466fcdcf99a9#@yorku.ca",nocase; classtype:attempted-recon; sid:200011440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/outlook-4c0f2.appspot.com/o/books%2fwebmail.htm?alt=media&\;token=216401d2-aba7-42f4-8fd5-9b672cade830#abuse@optusnet.com.au",nocase; classtype:attempted-recon; sid:200011441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/outlook-4c0f2.appspot.com/o/books%2fwebmail.htm?alt=media&\;token=216401d2-aba7-42f4-8fd5-9b672cade830#tiekimas@tidlo.lt",nocase; classtype:attempted-recon; sid:200011442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/pass-up-date-now.appspot.com/o/update-update-update%2findex.html?alt=media&\;token=d3144df5-bf15-4058-a0dc-9610b1a9193c#email=info@domain.tld",nocase; classtype:attempted-recon; sid:200011443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/preserving019029.appspot.com/o/index.html?alt=media&\;token=caa885e7-5275-4bde-bc3d-a3eb2c95dfee#r@yorku.ca",nocase; classtype:attempted-recon; sid:200011444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/rei-rezuio-rexire-565.appspot.com/o/%40%40%40indexv-vb-vau-ry-8%252fbv-yu-er-8f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%2525252f%25252525%20-%20copy.html?alt=media&\;token=da92acdd-870d-4049-b9ac-f0d373777f06#info@legalshield.com",nocase; classtype:attempted-recon; sid:200011445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/rned-a824v.appspot.com/o/gen%252findex2oli.html?alt=media&\;token=828c2259-c86f-442e-91a0-8d43a1fe7d8b#abuse@optusnet.com.au",nocase; classtype:attempted-recon; sid:200011446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/scnzmaccsscnncttw.appspot.com/o/index.html?alt=media&\;token=fe08a148-55d4-4bb8-8d3a-53479440818f",nocase; classtype:attempted-recon; sid:200011447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/tei-neriou-reuix-678.appspot.com/o/%40%40%40indexv-vb-veu-ry-8%25433%2569.html?alt=media&\;token=6b0a9c43-8711-491b-9f40-50ad280ffb32#ggradnigo@prepaidlegal.com",nocase; classtype:attempted-recon; sid:200011448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"firebasestorage.googleapis.com",nocase; http_uri; content:"/v0/b/update-d2e45.appspot.com/o/update%2fupdate%2findex.html?alt=media&\;token=ca2d4bde-8124-4812-9c7a-1ff88eb47549#@yorku.ca",nocase; classtype:attempted-recon; sid:200011449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/ayo1",nocase; classtype:attempted-recon; sid:200011450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/btinternetwebmail",nocase; classtype:attempted-recon; sid:200011451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/btphp",nocase; classtype:attempted-recon; sid:200011452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/dike",nocase; classtype:attempted-recon; sid:200011453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/hb247",nocase; classtype:attempted-recon; sid:200011454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/hkn01",nocase; classtype:attempted-recon; sid:200011455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/inv6",nocase; classtype:attempted-recon; sid:200011456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/khjrir",nocase; classtype:attempted-recon; sid:200011457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/pre42",nocase; classtype:attempted-recon; sid:200011458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flow.page",nocase; http_uri; content:"/vdg01",nocase; classtype:attempted-recon; sid:200011459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/13c1ofsbi?fc=0",nocase; classtype:attempted-recon; sid:200011460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/13wrz1ibd?fc=0",nocase; classtype:attempted-recon; sid:200011461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1ciue5mts?fc=0",nocase; classtype:attempted-recon; sid:200011462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1s6hcovwa?fc=0",nocase; classtype:attempted-recon; sid:200011463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1s6jiqmub?fc=0",nocase; classtype:attempted-recon; sid:200011464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1s6vqmwt2?fc=0",nocase; classtype:attempted-recon; sid:200011465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1sbjwytzo?fc=0",nocase; classtype:attempted-recon; sid:200011466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1scqelfiy?fc=0",nocase; classtype:attempted-recon; sid:200011467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/1shwmjpay?fc=0",nocase; classtype:attempted-recon; sid:200011468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/jh7qevcd2?fc=0",nocase; classtype:attempted-recon; sid:200011469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/jikou2sec?fc=0",nocase; classtype:attempted-recon; sid:200011470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/jln7h6rbw?",nocase; classtype:attempted-recon; sid:200011471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/p/jsoo0zbqr?fc=0",nocase; classtype:attempted-recon; sid:200011472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/aol-managementservices",nocase; classtype:attempted-recon; sid:200011473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/ayo1",nocase; classtype:attempted-recon; sid:200011474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/billbts",nocase; classtype:attempted-recon; sid:200011475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/bsp12",nocase; classtype:attempted-recon; sid:200011476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/btiinternet",nocase; classtype:attempted-recon; sid:200011477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/btinternetwebmail",nocase; classtype:attempted-recon; sid:200011478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/btinternetwebmailer",nocase; classtype:attempted-recon; sid:200011479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/btphp",nocase; classtype:attempted-recon; sid:200011480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/dido1",nocase; classtype:attempted-recon; sid:200011481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/dike",nocase; classtype:attempted-recon; sid:200011482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/dixatt",nocase; classtype:attempted-recon; sid:200011483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/hb247",nocase; classtype:attempted-recon; sid:200011484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/hkn01",nocase; classtype:attempted-recon; sid:200011485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/inv6",nocase; classtype:attempted-recon; sid:200011486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/j50",nocase; classtype:attempted-recon; sid:200011487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/jkh09",nocase; classtype:attempted-recon; sid:200011488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/khjrir",nocase; classtype:attempted-recon; sid:200011489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/pre42",nocase; classtype:attempted-recon; sid:200011490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/vdg01",nocase; classtype:attempted-recon; sid:200011491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/xpsatt",nocase; classtype:attempted-recon; sid:200011492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"flowcode.com",nocase; http_uri; content:"/page/ysl7",nocase; classtype:attempted-recon; sid:200011493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.jotform.com",nocase; http_uri; content:"/220989044830359",nocase; classtype:attempted-recon; sid:200011494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.jotform.com",nocase; http_uri; content:"/221027503251138",nocase; classtype:attempted-recon; sid:200011495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.jotform.com",nocase; http_uri; content:"/221186654354155",nocase; classtype:attempted-recon; sid:200011496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"form.jotform.com",nocase; http_uri; content:"/221295519236559",nocase; classtype:attempted-recon; sid:200011497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/1mqqu8exzgpptqpl8",nocase; classtype:attempted-recon; sid:200011498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/8epxhwdapiab7mfw7",nocase; classtype:attempted-recon; sid:200011499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/8hy7bzvwwabbpruv8",nocase; classtype:attempted-recon; sid:200011500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/8vb7wfyzcoeb6vvj8",nocase; classtype:attempted-recon; sid:200011501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/9bwawhpz5vi7ilpe6",nocase; classtype:attempted-recon; sid:200011502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/akohiguxjs9wlpu28?sllqm",nocase; classtype:attempted-recon; sid:200011503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/b7lqaal42juffiw1a",nocase; classtype:attempted-recon; sid:200011504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/bfz2l7i3wvrp5heb9",nocase; classtype:attempted-recon; sid:200011505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/cqzwfmqvrsnm7wrq9",nocase; classtype:attempted-recon; sid:200011506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/ejefrdpmyoad4gm58",nocase; classtype:attempted-recon; sid:200011507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/eozlrnnf7jh84xdp8",nocase; classtype:attempted-recon; sid:200011508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/fzlons3fgnjdqdd19?omgbfzrazhlppbtx",nocase; classtype:attempted-recon; sid:200011509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/goerpntl5tfeumdz6",nocase; classtype:attempted-recon; sid:200011510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/iai7pzm4pxyb145i9",nocase; classtype:attempted-recon; sid:200011511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/jnkkauxwwbfhtuqz9?hkgotygikyoujp",nocase; classtype:attempted-recon; sid:200011512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/jzxtb9auexgjcewfa",nocase; classtype:attempted-recon; sid:200011513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/kehch96avaku7oey7?akowgmooutpwa",nocase; classtype:attempted-recon; sid:200011514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/mwctig62j4y5mgm3a",nocase; classtype:attempted-recon; sid:200011515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/nokye42b5qkubgnt9",nocase; classtype:attempted-recon; sid:200011516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/puadbxscibgw5ma79?xfccuwmmhgwrwztd",nocase; classtype:attempted-recon; sid:200011517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/qxxe9xuu3h1lgpyc9",nocase; classtype:attempted-recon; sid:200011518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/rwpcmhm8vtfa7f4m8",nocase; classtype:attempted-recon; sid:200011519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/sj21ehdebhkcpvfv6",nocase; classtype:attempted-recon; sid:200011520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/smufgmyhduckbq6ka?fjxhgyroek",nocase; classtype:attempted-recon; sid:200011521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/uqzzznxv4cfhu3yr9",nocase; classtype:attempted-recon; sid:200011522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/v5xtnywt5s6zvpp27",nocase; classtype:attempted-recon; sid:200011523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/w6uh9p66tdq6l1m66",nocase; classtype:attempted-recon; sid:200011524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/x3aasffazsrl8pcr9",nocase; classtype:attempted-recon; sid:200011525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/xxjqmu6luzkpnalg6",nocase; classtype:attempted-recon; sid:200011526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.gle",nocase; http_uri; content:"/yfxkceytox2zuyvb6",nocase; classtype:attempted-recon; sid:200011527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.monday.com",nocase; http_uri; content:"/forms/5ed641e5cabd481304386f35b9120276/",nocase; classtype:attempted-recon; sid:200011528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.monday.com",nocase; http_uri; content:"/forms/5ed641e5cabd481304386f35b9120276?r=use1",nocase; classtype:attempted-recon; sid:200011529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=95vlqxxdseiozn16dgibdsdprn5ritrknkwe8o-kcqduntbduvdwsutpqzzcmk85mfdrsjk1u0pats4u",nocase; classtype:attempted-recon; sid:200011530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaao__tdasqlurfrqmjzxneyxn0g3vexutfvzq0mztu9fms4u",nocase; classtype:attempted-recon; sid:200011531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=dqsikwdsw0yxejajblztrqaaaaaaaaaaaao__thg5xvuodnbwtvytzhwwdnctknvovo4tldctexmvi4u",nocase; classtype:attempted-recon; sid:200011532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/pages/responsepage.aspx?id=jrbxvx3x9keewcq72hm6fnkqekonandcsjd9av060h5urepumvvgmks2te41rfewmlletulvufnuqy4u",nocase; classtype:attempted-recon; sid:200011533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.office.com",nocase; http_uri; content:"/r/ne89gvwrye",nocase; classtype:attempted-recon; sid:200011534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zoho.com",nocase; http_uri; content:"/247michaelbryan/form/signinyourbtaccountcorrectly1",nocase; classtype:attempted-recon; sid:200011535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zoho.com",nocase; http_uri; content:"/pattles066/form/signinyourbtaccountcorrectly",nocase; classtype:attempted-recon; sid:200011536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zoho.com",nocase; http_uri; content:"/traskray168/form/signinyourbtaccountcorrectly1",nocase; classtype:attempted-recon; sid:200011537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zoho.eu",nocase; http_uri; content:"/armandb622/form/signinyourbtaccountcorrectly",nocase; classtype:attempted-recon; sid:200011538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zoho.eu",nocase; http_uri; content:"/mucmddc993/form/signinyourbtaccountcorrectly",nocase; classtype:attempted-recon; sid:200011539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zohopublic.com",nocase; http_uri; content:"/betterr/form/signinyourbtaccountcorrectly/formperma/exsdfrpzff-3v0yzi-n9uzc-zthoo6q0gwbryfxcruu",nocase; classtype:attempted-recon; sid:200011540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zohopublic.com",nocase; http_uri; content:"/newtryy/form/signinyourbtaccountcorrectly/formperma/3rdttpfoy_7z6xb4n4w8l0idqsuw45bkbd4nr36rzke",nocase; classtype:attempted-recon; sid:200011541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"forms.zohopublic.eu",nocase; http_uri; content:"/niphugpin/form/signinyourbtaccounthere/formperma/kve1oqytth0pw-sxqgmyx2ernc48pon0j1fkkr1nzi0",nocase; classtype:attempted-recon; sid:200011542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fra1.digitaloceanspaces.com",nocase; http_uri; content:"/214843sharepoint/2ndffs.html",nocase; classtype:attempted-recon; sid:200011543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fredsamasont.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"fundacioncanelot.com",nocase; http_uri; content:"/generalmsprint/",nocase; classtype:attempted-recon; sid:200011545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"generator.discordnitrogift.com",nocase; http_uri; content:"/php/newdocs/",nocase; classtype:attempted-recon; sid:200011546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"genopets.mints.id",nocase; http_uri; content:"/?=freelimitedmint",nocase; classtype:attempted-recon; sid:200011547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"getrfdeza.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gg.gg",nocase; http_uri; content:"/1189s6",nocase; classtype:attempted-recon; sid:200011549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gg.gg",nocase; http_uri; content:"/ydcr0",nocase; classtype:attempted-recon; sid:200011550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gift-1212.blogspot.com",nocase; http_uri; content:"/2022/01/daily-rm8888-shopee-1_23.html?m=1",nocase; classtype:attempted-recon; sid:200011551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gilbertolopez.com",nocase; http_uri; content:"/mexico80/index.html",nocase; classtype:attempted-recon; sid:200011552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.ly",nocase; http_uri; content:"/dbs4p",nocase; classtype:attempted-recon; sid:200011553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.ly",nocase; http_uri; content:"/dcekq",nocase; classtype:attempted-recon; sid:200011554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.ly",nocase; http_uri; content:"/dvtoj",nocase; classtype:attempted-recon; sid:200011555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.ly",nocase; http_uri; content:"/isesn",nocase; classtype:attempted-recon; sid:200011556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.ly",nocase; http_uri; content:"/m8ipl",nocase; classtype:attempted-recon; sid:200011557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.ly",nocase; http_uri; content:"/owe98",nocase; classtype:attempted-recon; sid:200011558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.ly",nocase; http_uri; content:"/pbqen",nocase; classtype:attempted-recon; sid:200011559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.ly",nocase; http_uri; content:"/yvkdg",nocase; classtype:attempted-recon; sid:200011560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&\;test=off&\;id=355x561&\;url=https://www.paypal.com/shopping/&\;xguid=01fez46yyrvh6f0bbehn8h419h&\;persistence=1&\;checksum=069f46345ac935567ad562a3d64a332066064c97f8feae803d555f9cc820c561",nocase; classtype:attempted-recon; sid:200011561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&\;test=off&\;id=355x561&\;url=https://www.paypal.com/shopping/&\;xguid=01fezncfbjbj86yneatjn0qvt4&\;persistence=1&\;checksum=8142350e161acc6cb246be1d05d596973a1d3ac50af1f3594ee9ea462c87a4ef",nocase; classtype:attempted-recon; sid:200011562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&\;test=off&\;id=355x561&\;url=https://www.paypal.com/shopping/&\;xguid=01ff06m6n2q43m6zcaqrh8xpm2&\;persistence=1&\;checksum=26e140f8abae23dd0c8dd547390a4deb9fc54b1acf3539d8aa44fb19e04902ef",nocase; classtype:attempted-recon; sid:200011563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"go.skimresources.com",nocase; http_uri; content:"/?xcust=2c8967cc0ec911ec9332aea895ef3e670int&\;test=off&\;id=355x561&\;url=https://www.paypal.com/shopping/&\;xguid=01ff0qxy635yfpkrdaxav47j5k&\;persistence=1&\;checksum=cb2e0f7328d6ffea0e15a24046095a0bb98d27d4488e822bea4b181763f2eb0b",nocase; classtype:attempted-recon; sid:200011564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"goo.su",nocase; http_uri; content:"/aksf",nocase; classtype:attempted-recon; sid:200011565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.ch",nocase; http_uri; content:"/url?q=https://spk-kunden-manager.com/rcjju7exxu#1lwkr92k20x&sa=d&sntz=1&usg=aovvaw1sjseir4b0q4l8sbg3z3us",nocase; classtype:attempted-recon; sid:200011566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?hl=en&\;q=https://quarantine29042022app-1311615844.cos.ap-chengdu.myqcloud.com/aaqkagm3ztm2odcyltawzgmtndk3ns05zjuxltixzmyyyznkntexmgaqadpitonhie1hjl70qeb7vdi-quarantine02719message283/quarantine.html%23pimo@apms-ltd.com&\;source=gmail&\;ust=1654842023923000&\;usg=aovvaw3tlbzf2sxh2-mtjs7iurao",nocase; classtype:attempted-recon; sid:200011567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?mo=78986685794&q=https://c1r.at/h49xmdcp&zp=5095739289&kf=59242331&sa=d&usg=afqjcnf_3jyqkupfmf1gle_0jmhtak3s0w",nocase; classtype:attempted-recon; sid:200011568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=http%3a%2f%2fbit.do%2ffr6ci&sa=d&sntz=1&usg=afqjcne7joz-iz-adrzkrxcihj8t9fs9qw",nocase; classtype:attempted-recon; sid:200011569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=http%3a%2f%2fbit.do%2ffsgjq&\;sa=d&\;sntz=1&\;usg=afqjcngvqc30z-4hiaizv03gpwblwu3vnw",nocase; classtype:attempted-recon; sid:200011570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=http%3a%2f%2fcanarytokens.com%2farticles%2fterms%2fimages%2f6273376tgy8lrrnek9ai08a01%2fredirect.html&\;sa=d&\;sntz=1&\;usg=aovvaw20yd4y6h3k2ostqzlu8pmd",nocase; classtype:attempted-recon; sid:200011571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=http://nouvelles-hybrides.fr/wp-admin/general/hhhheng/hhhheng/hhhhh.php?email%3d%5b%5b-email-%5d%5d&\;source=gmail&\;ust=1648980902684000&\;usg=aovvaw3lj6xdrkr7te65my0ifv8q",nocase; classtype:attempted-recon; sid:200011572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https%3a%2f%2fpo9cz.weebly.com&\;sa=d&\;sntz=1&\;usg=afqjcnec0vbdyqyotdsbz7gijk588avcwg",nocase; classtype:attempted-recon; sid:200011573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https%3a%2f%2ftestwordpress.top%2fwp-content%2facaynumpang.html&sa=d&sntz=1&usg=afqjcneq22nczpte3zh2zdvetbj9kx5z1g",nocase; classtype:attempted-recon; sid:200011574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https%3a%2f%2fvip.91234567.cn%2fwp-includes%2firsapi1.html&sa=d&sntz=1&usg=afqjcnfo-ujbo-tnv5d6why8olvgunjxjq",nocase; classtype:attempted-recon; sid:200011575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https%3a%2f%2fvk.cc%2fcbjxkb&sa=d&509=848&usg=afqjcnec4gkgoe88ifnjjrnagnlez6uneq",nocase; classtype:attempted-recon; sid:200011576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https://393512dfd8544c98be9a40f2f67df8bd.svc.dynamics.com/t/r/a7uua5shyiplufx4zj7f6u2clgtguiagoxngfoio4am?clientid%3d70000%23%5bemail%5d%2b00-70000&\;source=gmail&\;ust=1636719774661000&\;usg=aovvaw2fsk8htfwhsfqapvbu674n",nocase; classtype:attempted-recon; sid:200011577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https://c1r.at/fzleuule&ry=9080899&sa=d&ha=9992286639&usg=afqjcngde0oxaxjtp-semb24qndyxqpfeg&jj=95316071",nocase; classtype:attempted-recon; sid:200011578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.com",nocase; http_uri; content:"/url?q=https://c1r.at/n62bfdcp&od=3896761062&sa=d&usg=afqjcnhmj6a5ejlmnfnws314axi9thcopa&qw=69345649672&rh=90290680",nocase; classtype:attempted-recon; sid:200011579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"google.mg",nocase; http_uri; content:"/url?q=https://sparka-mitarbeiter-bedienung.com/mrqbh2k2go#kibeh0zls93&sa=d&sntz=1&usg=aovvaw1tg5zgmjckq7dbqzkgqnwb",nocase; classtype:attempted-recon; sid:200011580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleadservices.com",nocase; http_uri; content:"/pagead/aclk?sa=l&ai=dchcsewiw5p-d-iv3ahxt1uwchzh3agqyabaaggj0bq&ae=2&ohost=www.google.com&cid=caasjuroaxosav2bls4w44vhiifany715dsta2jmqibnnb2uw3ivamv-&sig=aod64_1gbkkqb08bytj4vam2blr5dnqceg&q&adurl&ved=2ahukewin-fmd-iv3ahvgzd4khuwhc3uq0qx6bagdeae?shiny",nocase; classtype:attempted-recon; sid:200011581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleadservices.com",nocase; http_uri; content:"/pagead/aclk?sa=l&\;ai=dchcsewjd3sorkop3ahwvziskhv4-a_gyabaaggj0bq&\;ae=2&\;ohost=www.google.com&\;cid=caasjero70mx2is4vg1i9iopapyxwkc4v8kee7nwuaxpjgnw6fcscwm&\;sig=aod64_3pmttcqubemhqww-zlsfeyp-obfq&\;q&\;adurl&\;ved=2ahukewieml2rkop3ahueqfybhwzycmiq0qx6bagdeae?shiny",nocase; classtype:attempted-recon; sid:200011582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleweblight.com",nocase; http_uri; content:"/i?u=a894ec7f.46t33454t4.pages.dev?user=masoli@legalshieldassociate.com",nocase; classtype:attempted-recon; sid:200011583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleweblight.com",nocase; http_uri; content:"/i?u=b4e921f0.sso-mailsrvr-4344e5teed.pages.dev?user=abuse@gmail.com",nocase; classtype:attempted-recon; sid:200011584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleweblight.com",nocase; http_uri; content:"/i?u=https://storageapi.fleek.co/f898fa0c-1b8c-4b3a-ae09-58cd15bfa8ef-bucket/api/index.html?submit=user@domain.ca",nocase; classtype:attempted-recon; sid:200011585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"googleweblight.com",nocase; http_uri; content:"/i?u=https://webmailn0s9344.myssomailsecure-srvr3.ws24.biz/index.html?submit=redacted@redacted.tld",nocase; classtype:attempted-recon; sid:200011586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gormanusa-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/tspencer_gormanusa_com/_layouts/15/wopiframe.aspx?guestaccesstoken=wgfwcmmssvdsofa7ljviwaj85tleclug2xbvoqwlmp0%3d&\;docid=1_12424441d8c29412bb868684e5cb74e47&\;wdformid=%7b992e319a%2dbe72%2d460b%2db6b4%2d2d3fcf789fc5%7d&\;action=formsubmit",nocase; classtype:attempted-recon; sid:200011587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gradcracker.com",nocase; http_uri; content:"/out/408?jobid=29207&u=princed.de?id=8400239909",nocase; classtype:attempted-recon; sid:200011588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"gxd.xvt.mybluehost.me",nocase; http_uri; content:"/flagup3489/index.html",nocase; classtype:attempted-recon; sid:200011589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/cackx",nocase; classtype:attempted-recon; sid:200011590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/fmjiu",nocase; classtype:attempted-recon; sid:200011591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/lgsjo",nocase; classtype:attempted-recon; sid:200011592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"han.gl",nocase; http_uri; content:"/wrqjp",nocase; classtype:attempted-recon; sid:200011593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hangovertest1.blogspot.com",nocase; http_uri; content:"/2021/12/window.html",nocase; classtype:attempted-recon; sid:200011594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"higherselfdevelopment.com",nocase; http_uri; content:"/secure/id/index.php",nocase; classtype:attempted-recon; sid:200011595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"hitmailreview2.web.app",nocase; http_uri; content:"/jkshjmascmwlkmeclnsllljalskdlmfj.html#test@test.com",nocase; classtype:attempted-recon; sid:200011596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://credit-agricole.it/",nocase; classtype:attempted-recon; sid:200011597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://dplux.com.ng/cgi-bin/",nocase; classtype:attempted-recon; sid:200011598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://free-url-shortener.rb.gy/",nocase; classtype:attempted-recon; sid:200011599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://ib.adnxs.com/seg?redir=https://secure.adnxs.com/seg?redir=http://owl.li/pphv30sb9tt",nocase; classtype:attempted-recon; sid:200011600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://play.staratlas.com/",nocase; classtype:attempted-recon; sid:200011601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://trimurl.co/0wsx7z",nocase; classtype:attempted-recon; sid:200011602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://www.aquarelle.es/tienda/ramos-de-rosas/",nocase; classtype:attempted-recon; sid:200011603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://www.google.com/search?q=",nocase; classtype:attempted-recon; sid:200011604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://www.google.com/search?q=vystar+login",nocase; classtype:attempted-recon; sid:200011605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://www3.citizensbankonline.com/",nocase; classtype:attempted-recon; sid:200011606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/?https://ykm.de/f4b990c239777330",nocase; classtype:attempted-recon; sid:200011607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/https://aratera.com/wp-admin/",nocase; classtype:attempted-recon; sid:200011608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li",nocase; http_uri; content:"/https://performancelocal.com/wp-admin/",nocase; classtype:attempted-recon; sid:200011609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"href.li?https:",nocase; http_uri; content:"//ykm.de/f4b990c239777330",nocase; classtype:attempted-recon; sid:200011610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ht.ly",nocase; http_uri; content:"/shoh30rwmdj?10/13/2021",nocase; classtype:attempted-recon; sid:200011611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i-m.mx",nocase; http_uri; content:"/ebuse/servic",nocase; classtype:attempted-recon; sid:200011612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"i-m.mx",nocase; http_uri; content:"/webaccountupdate/stockholmsuniversitet/",nocase; classtype:attempted-recon; sid:200011613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"idola.net.id",nocase; http_uri; content:"/prostars/index.html",nocase; classtype:attempted-recon; sid:200011614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ief.tqa.mybluehost.me",nocase; http_uri; content:"/9834665191/css/tt/security/cont.php",nocase; classtype:attempted-recon; sid:200011615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ifyufyujk.quip.com",nocase; http_uri; content:"/mdkea5ckpozm/click-here-to-start",nocase; classtype:attempted-recon; sid:200011616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/4t6u/bt",nocase; classtype:attempted-recon; sid:200011617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/4t6u/e",nocase; classtype:attempted-recon; sid:200011618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/btbroadband/bt_broadband",nocase; classtype:attempted-recon; sid:200011619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/btin/bt",nocase; classtype:attempted-recon; sid:200011620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/fgjjm/1-xp",nocase; classtype:attempted-recon; sid:200011621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/iuhj/kay",nocase; classtype:attempted-recon; sid:200011622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/kennymoore12/btinternet",nocase; classtype:attempted-recon; sid:200011623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/kfouo/btcommmms",nocase; classtype:attempted-recon; sid:200011624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/lasodi2/attworld",nocase; classtype:attempted-recon; sid:200011625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/lofty2/mobileatt",nocase; classtype:attempted-recon; sid:200011626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/microvalid/bt_mail",nocase; classtype:attempted-recon; sid:200011627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/microvalid/btcomms",nocase; classtype:attempted-recon; sid:200011628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/microvalid/btcommuni",nocase; classtype:attempted-recon; sid:200011629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/msw0rd/att_word",nocase; classtype:attempted-recon; sid:200011630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/free/msw0rd/attsusers",nocase; classtype:attempted-recon; sid:200011631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/viewer/vbid-31138d48-omsttuer",nocase; classtype:attempted-recon; sid:200011632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"im-creator.com",nocase; http_uri; content:"/viewer/vbid-fa0f29d5-fpsjmms8",nocase; classtype:attempted-recon; sid:200011633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imcreator.com",nocase; http_uri; content:"/viewer/vbid-fa0f29d5-fpsjmms8",nocase; classtype:attempted-recon; sid:200011634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imxprs.com",nocase; http_uri; content:"/free/emailupdatee/owaweb",nocase; classtype:attempted-recon; sid:200011635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imxprs.com",nocase; http_uri; content:"/free/outlookwebaccessupgrade/outlookwebaccessupgrade",nocase; classtype:attempted-recon; sid:200011636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"imxprs.com",nocase; http_uri; content:"/free/webmaiil/accounttportal",nocase; classtype:attempted-recon; sid:200011637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"injazrest.com",nocase; http_uri; content:"/wp-includes/js/net/",nocase; classtype:attempted-recon; sid:200011638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"insurance2019.moneynet.com.tw",nocase; http_uri; content:"/wp-admin/maint/?hash=a2fyaw5hywxtzwlkyxjpymvpcm9aag90bwfpbc5jb20=",nocase; classtype:attempted-recon; sid:200011639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"internetservicetech.com",nocase; http_uri; content:"/landingpages/214dde44-d83d-472c-808d-4304cf3e308c/j1cxrrh7-",nocase; classtype:attempted-recon; sid:200011640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"internetservicetech.com",nocase; http_uri; content:"/landingpages/214dde44-d83d-472c-808d-4304cf3e308c/j1cxrrh7-%20a99jcpazg1u1lchzsks0nyx0reukftnqsc",nocase; classtype:attempted-recon; sid:200011641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inx.lv",nocase; http_uri; content:"/9g9h",nocase; classtype:attempted-recon; sid:200011642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inx.lv",nocase; http_uri; content:"/9git",nocase; classtype:attempted-recon; sid:200011643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inx.lv",nocase; http_uri; content:"/9gkk",nocase; classtype:attempted-recon; sid:200011644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"inx.lv",nocase; http_uri; content:"/hvsy",nocase; classtype:attempted-recon; sid:200011645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.fleek.co",nocase; http_uri; content:"/ipfs/bafybeieva3f7armucd63rfnbkjdggoj2jinojmwpsavqr3xwcc4uhucryq?utm_source=benchmarkemail&utm_campaign=godson&utm_medium=email",nocase; classtype:attempted-recon; sid:200011646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmdes79kicrswmhgiubxfuqa8gfsomg699qahgyx4iepfh",nocase; classtype:attempted-recon; sid:200011647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmebhkt36w3jfrll2k4jevvpvsniym5nessgtvjuaqjxje?key=bf38df4466e9cb6870142585341d7c28c4be5cba&url_01=https://asserta-honeyedly-toom.s3.us-west-004.backblazeb2.com/index.html&url_02=https://climacium-opuntiales-retar.s3.eu-central-003.backblazeb2.com/index.html&url_03=https://equalled-hylodes-penmanship.s3.eu-central-003.backblazeb2.com/index.html&url_04=https://keepsaky-samiri-subcyanide.s3.eu-central-003.backblazeb2.com/index.html&url_05=https://eccyesis-euge-splatterfaced.s3.eu-central-003.backblazeb2.com/index.html&redirect=https://www.amazon.com",nocase; classtype:attempted-recon; sid:200011648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ipfs.io",nocase; http_uri; content:"/ipfs/qmw6fsxoj7n2p564wp4baxkwveuzrrbnbfcpjgxqr4vjqc?filename=oiccce.html",nocase; classtype:attempted-recon; sid:200011649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ironfirefit.com",nocase; http_uri; content:"/login/steam?openid.ns=benisinb@gi.na",nocase; classtype:attempted-recon; sid:200011650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-finance-tax-payment.com",nocase; http_uri; content:"/home",nocase; classtype:attempted-recon; sid:200011651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"irs-ticket.com",nocase; http_uri; content:"/review",nocase; classtype:attempted-recon; sid:200011652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/4pw5wk?facebook_confirmation",nocase; classtype:attempted-recon; sid:200011653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/6obek3?facebook_verification",nocase; classtype:attempted-recon; sid:200011654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/g4qcgf",nocase; classtype:attempted-recon; sid:200011655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/gvedma?facebook_verification",nocase; classtype:attempted-recon; sid:200011656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/hhjcod?facebook_verification",nocase; classtype:attempted-recon; sid:200011657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/jkm8fw?facebook_confirmation",nocase; classtype:attempted-recon; sid:200011658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/kg6pcp?facebook_verification",nocase; classtype:attempted-recon; sid:200011659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/lhvfbc?facebook_verification",nocase; classtype:attempted-recon; sid:200011660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/na5h9w?facebook_verification",nocase; classtype:attempted-recon; sid:200011661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/nxcreditagricole",nocase; classtype:attempted-recon; sid:200011662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/uuh9ej?facebook_verification",nocase; classtype:attempted-recon; sid:200011663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/vkgabg?facebook_confirmation",nocase; classtype:attempted-recon; sid:200011664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/z0flom?facebook_confirmation",nocase; classtype:attempted-recon; sid:200011665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"is.gd",nocase; http_uri; content:"/zgkivm?facebook_confirmation",nocase; classtype:attempted-recon; sid:200011666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"itie.sn",nocase; http_uri; content:"/vystarcu.org/login/activate",nocase; classtype:attempted-recon; sid:200011667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jamesstevenpost.com",nocase; http_uri; content:"/fe_new.html",nocase; classtype:attempted-recon; sid:200011668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jefigscredit.co.ke",nocase; http_uri; content:"/dost",nocase; classtype:attempted-recon; sid:200011669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jefigscredit.co.ke",nocase; http_uri; content:"/dost/",nocase; classtype:attempted-recon; sid:200011670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jivo.chat",nocase; http_uri; content:"/code-eu1.jivosite.com/widget/jqqceif7de",nocase; classtype:attempted-recon; sid:200011671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jkolawnservice.com",nocase; http_uri; content:"/outlook/index.html",nocase; classtype:attempted-recon; sid:200011672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jkolawnservice.com",nocase; http_uri; content:"/owa/index.html",nocase; classtype:attempted-recon; sid:200011673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jreasctiaiskc.cc",nocase; http_uri; content:"/personal/member/login/index.php?onetimeaccessid=f9492eaf07c44f5a38b744435202a740",nocase; classtype:attempted-recon; sid:200011674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"jtbtigers.com",nocase; http_uri; content:"/7euow",nocase; classtype:attempted-recon; sid:200011675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"k12inc-my.sharepoint.com",nocase; http_uri; content:"/personal/jdonahue_k12_com/_layouts/15/wopiframe.aspx?guestaccesstoken=jxndynkzmynao0nofzmhz4t%2fk%2br%2fg7qir2agrjo42ha%3d&docid=1_12252b23331654ef4bf8ef978a8eb83ee&wdformid=%7b2711d93c%2d7591%2d4baa%2db377%2dcf40ba8c7343%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200011676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kakasoufatre.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keap.app",nocase; http_uri; content:"/contact-us/2970503358622564",nocase; classtype:attempted-recon; sid:200011678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kelleyinthekitchen.com",nocase; http_uri; content:"/camelon/index.html#abuse@optusnet.com.au",nocase; classtype:attempted-recon; sid:200011679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"keto-diet.org",nocase; http_uri; content:"/livelo/banco.bradesco/html/classic/promocoes/transforme_sua_casa/",nocase; classtype:attempted-recon; sid:200011680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kingfaisalprize.org",nocase; http_uri; content:"/wp-email/webmail/",nocase; classtype:attempted-recon; sid:200011681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kmcthospital.com",nocase; http_uri; content:"/wp-content/plugins/wck-custom-fields-and-customs-post-types-creator/marketing/acceptance/socder/app/otp.php",nocase; classtype:attempted-recon; sid:200011682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kmcthospital.com",nocase; http_uri; content:"/wp-content/plugins/wck-custom-fields-and-customs-post-types-creator/marketing/acceptance/socder/app/phone.php",nocase; classtype:attempted-recon; sid:200011683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kmcthospital.com",nocase; http_uri; content:"/wp-includes/standxx3d/app/otp.php",nocase; classtype:attempted-recon; sid:200011684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koji.to",nocase; http_uri; content:"/bt_internet",nocase; classtype:attempted-recon; sid:200011685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koji.to",nocase; http_uri; content:"/bt_service_alert.",nocase; classtype:attempted-recon; sid:200011686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"koji.to",nocase; http_uri; content:"/bt_teem",nocase; classtype:attempted-recon; sid:200011687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"krizia.it",nocase; http_uri; content:"/.tmb/cose//correos/?clp=327598322",nocase; classtype:attempted-recon; sid:200011688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kutt.it",nocase; http_uri; content:"/fthaqu",nocase; classtype:attempted-recon; sid:200011689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kutt.it",nocase; http_uri; content:"/l3leph",nocase; classtype:attempted-recon; sid:200011690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kutt.it",nocase; http_uri; content:"/swissssss",nocase; classtype:attempted-recon; sid:200011691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kuyhaa-me.pw",nocase; http_uri; content:"/dhtanx/office/index.php",nocase; classtype:attempted-recon; sid:200011692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"kuyhaa-me.pw",nocase; http_uri; content:"/dhtanx/office/index2.php",nocase; classtype:attempted-recon; sid:200011693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://abre.ai/eduz?userid=nwwuer4j",nocase; classtype:attempted-recon; sid:200011694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://abre.ai/een1?userid=gkywgnp7",nocase; classtype:attempted-recon; sid:200011695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://abre.ai/egic?userid=urrtk9bo",nocase; classtype:attempted-recon; sid:200011696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://abre.ai/ei3z?userid=nl7mbjhz",nocase; classtype:attempted-recon; sid:200011697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://bit.ly/3mlmufl?trackingid=asgfti6f&signature=newsletter",nocase; classtype:attempted-recon; sid:200011698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://s.id/12ezw?userid=g8tmk6cv",nocase; classtype:attempted-recon; sid:200011699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l.wl.co",nocase; http_uri; content:"/l?u=https://s.id/12ezw?userid=iwhzddbk",nocase; classtype:attempted-recon; sid:200011700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"l24.im",nocase; http_uri; content:"/a0n",nocase; classtype:attempted-recon; sid:200011701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lasvegasmustangservice.com",nocase; http_uri; content:"/?jcb.login=zg0s.id=dfqt",nocase; classtype:attempted-recon; sid:200011702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ldp.page",nocase; http_uri; content:"/627d1ee47d4cb80020d558aa",nocase; classtype:attempted-recon; sid:200011703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/1rvqqm",nocase; classtype:attempted-recon; sid:200011704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/8nyk33",nocase; classtype:attempted-recon; sid:200011705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/9onwxq",nocase; classtype:attempted-recon; sid:200011706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/assessoriabvonline",nocase; classtype:attempted-recon; sid:200011707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/atdminhabv",nocase; classtype:attempted-recon; sid:200011708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/bvha",nocase; classtype:attempted-recon; sid:200011709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/fguugio",nocase; classtype:attempted-recon; sid:200011710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/hdyhid",nocase; classtype:attempted-recon; sid:200011711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/hifyiu",nocase; classtype:attempted-recon; sid:200011712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/jgbjg",nocase; classtype:attempted-recon; sid:200011713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/mssdxd",nocase; classtype:attempted-recon; sid:200011714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/nuinvest",nocase; classtype:attempted-recon; sid:200011715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/nupagamentos21",nocase; classtype:attempted-recon; sid:200011716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/pagamentos.a",nocase; classtype:attempted-recon; sid:200011717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/portalclientebv",nocase; classtype:attempted-recon; sid:200011718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/qk1m4v",nocase; classtype:attempted-recon; sid:200011719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/rubbishrubiish",nocase; classtype:attempted-recon; sid:200011720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/suportedigital2",nocase; classtype:attempted-recon; sid:200011721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/vv06p6",nocase; classtype:attempted-recon; sid:200011722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/vvolr6",nocase; classtype:attempted-recon; sid:200011723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/w1p0l6",nocase; classtype:attempted-recon; sid:200011724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/woo3x4",nocase; classtype:attempted-recon; sid:200011725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/yahuumail",nocase; classtype:attempted-recon; sid:200011726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linkr.bio",nocase; http_uri; content:"/yhooooo",nocase; classtype:attempted-recon; sid:200011727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/accountupdate12",nocase; classtype:attempted-recon; sid:200011728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/activitlogs",nocase; classtype:attempted-recon; sid:200011729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/adamson12345",nocase; classtype:attempted-recon; sid:200011730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/admin__",nocase; classtype:attempted-recon; sid:200011731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/alcorbeil503",nocase; classtype:attempted-recon; sid:200011732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/aoladmin_",nocase; classtype:attempted-recon; sid:200011733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/appiesecure2021",nocase; classtype:attempted-recon; sid:200011734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/att.net12",nocase; classtype:attempted-recon; sid:200011735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/attmailuser",nocase; classtype:attempted-recon; sid:200011736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/attservice67",nocase; classtype:attempted-recon; sid:200011737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/britishtelecommunciation",nocase; classtype:attempted-recon; sid:200011738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/bt.o.world",nocase; classtype:attempted-recon; sid:200011739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/bt45y",nocase; classtype:attempted-recon; sid:200011740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/bt5644",nocase; classtype:attempted-recon; sid:200011741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btbroadteam",nocase; classtype:attempted-recon; sid:200011742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btbroadteam/",nocase; classtype:attempted-recon; sid:200011743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btcreator",nocase; classtype:attempted-recon; sid:200011744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btinternet12",nocase; classtype:attempted-recon; sid:200011745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btinternet21",nocase; classtype:attempted-recon; sid:200011746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/btsecurelink/",nocase; classtype:attempted-recon; sid:200011747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/bttlee",nocase; classtype:attempted-recon; sid:200011748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/bupporrrt",nocase; classtype:attempted-recon; sid:200011749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/currentl",nocase; classtype:attempted-recon; sid:200011750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/dfghjkjhgdfgh",nocase; classtype:attempted-recon; sid:200011751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/dhlpackage",nocase; classtype:attempted-recon; sid:200011752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/fearnomore",nocase; classtype:attempted-recon; sid:200011753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/ggbnhb",nocase; classtype:attempted-recon; sid:200011754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/ghvfg",nocase; classtype:attempted-recon; sid:200011755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/hendersome",nocase; classtype:attempted-recon; sid:200011756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/hthto204",nocase; classtype:attempted-recon; sid:200011757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/imcreatorboard",nocase; classtype:attempted-recon; sid:200011758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/imcreatorbt",nocase; classtype:attempted-recon; sid:200011759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/jfgjg",nocase; classtype:attempted-recon; sid:200011760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/jgbjgbjh",nocase; classtype:attempted-recon; sid:200011761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/johnbrownn4811",nocase; classtype:attempted-recon; sid:200011762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/johnbulljohn",nocase; classtype:attempted-recon; sid:200011763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/mail1083",nocase; classtype:attempted-recon; sid:200011764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/makee4",nocase; classtype:attempted-recon; sid:200011765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/marhfx",nocase; classtype:attempted-recon; sid:200011766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/millie5566",nocase; classtype:attempted-recon; sid:200011767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/newaccount12",nocase; classtype:attempted-recon; sid:200011768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/redirtoken981?dop=991154801",nocase; classtype:attempted-recon; sid:200011769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/sbccglob",nocase; classtype:attempted-recon; sid:200011770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/secubtscjotj",nocase; classtype:attempted-recon; sid:200011771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/status/blocked?username=attservice67",nocase; classtype:attempted-recon; sid:200011772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/status/blocked?username=btsecurelink",nocase; classtype:attempted-recon; sid:200011773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/submisin",nocase; classtype:attempted-recon; sid:200011774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/supportleee",nocase; classtype:attempted-recon; sid:200011775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/updategmxmail",nocase; classtype:attempted-recon; sid:200011776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/verifyyourprotonmailemail",nocase; classtype:attempted-recon; sid:200011777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/xxxx5",nocase; classtype:attempted-recon; sid:200011778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"linktr.ee",nocase; http_uri; content:"/yahooatt",nocase; classtype:attempted-recon; sid:200011779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livablefutureblog.com",nocase; http_uri; content:"/mk/lin/lin/",nocase; classtype:attempted-recon; sid:200011780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livenmitac-my.sharepoint.com",nocase; http_uri; content:"/personal/hannah-daly_live_nmit_ac_nz/_layouts/15/wopiframe.aspx?guestaccesstoken=ia5uzzon3iviku4f3pxemyhhabfwkpdjirpftfear%2fk%3d&docid=1_169208e425ed84fea9fd294a6886d67e9&wdformid=%7b06255f86%2d4bf9%2d4ee8%2dbd7e%2dfef81913a79b%7d&action=formsubmit",nocase; classtype:attempted-recon; sid:200011781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"livenmitac-my.sharepoint.com",nocase; http_uri; content:"/personal/hannah-daly_live_nmit_ac_nz/_layouts/15/wopiframe.aspx?guestaccesstoken=ia5uzzon3iviku4f3pxemyhhabfwkpdjirpftfear/k=&\;docid=1_169208e425ed84fea9fd294a6886d67e9&\;wdformid={06255f86-4bf9-4ee8-bd7e-fef81913a79b}&\;action=formsubmit",nocase; classtype:attempted-recon; sid:200011782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/d-3hbjpx",nocase; classtype:attempted-recon; sid:200011783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/d2cagqdm",nocase; classtype:attempted-recon; sid:200011784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/d_kqpmtx",nocase; classtype:attempted-recon; sid:200011785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/dfxw4_sm=ojdszb15xdzzzv",nocase; classtype:attempted-recon; sid:200011786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/di6hueus",nocase; classtype:attempted-recon; sid:200011787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/difsmpfx",nocase; classtype:attempted-recon; sid:200011788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/dkng9_k3",nocase; classtype:attempted-recon; sid:200011789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/dr4agxum",nocase; classtype:attempted-recon; sid:200011790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/drgcsgzw",nocase; classtype:attempted-recon; sid:200011791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/drsgmgjm",nocase; classtype:attempted-recon; sid:200011792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/drxkr5pj",nocase; classtype:attempted-recon; sid:200011793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e2p8spez",nocase; classtype:attempted-recon; sid:200011794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e3g9qxhs",nocase; classtype:attempted-recon; sid:200011795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e5gzdpqa",nocase; classtype:attempted-recon; sid:200011796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/e_idwusk",nocase; classtype:attempted-recon; sid:200011797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/easrgdqg",nocase; classtype:attempted-recon; sid:200011798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ecymrzgu",nocase; classtype:attempted-recon; sid:200011799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/edvvp6ax",nocase; classtype:attempted-recon; sid:200011800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ee5yc9ca",nocase; classtype:attempted-recon; sid:200011801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/eefrfkzq?=ojiouwexpg8h5s",nocase; classtype:attempted-recon; sid:200011802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/eewnmwgr",nocase; classtype:attempted-recon; sid:200011803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/egbbkcqr",nocase; classtype:attempted-recon; sid:200011804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ehk85dzy",nocase; classtype:attempted-recon; sid:200011805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/emmrycxb",nocase; classtype:attempted-recon; sid:200011806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/epbe4esg",nocase; classtype:attempted-recon; sid:200011807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/eqe_7fzg",nocase; classtype:attempted-recon; sid:200011808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/eqexis8b?=779auzfcptp61w",nocase; classtype:attempted-recon; sid:200011809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/esh6x-2g",nocase; classtype:attempted-recon; sid:200011810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/esjzqf_8",nocase; classtype:attempted-recon; sid:200011811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/et-dkcdj",nocase; classtype:attempted-recon; sid:200011812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/eu3tad-d",nocase; classtype:attempted-recon; sid:200011813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/euhr7uki",nocase; classtype:attempted-recon; sid:200011814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/evbzscwd",nocase; classtype:attempted-recon; sid:200011815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/evjgv5bv?=eme9jh5wippejx",nocase; classtype:attempted-recon; sid:200011816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ewfyckzm",nocase; classtype:attempted-recon; sid:200011817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ews7fgtw",nocase; classtype:attempted-recon; sid:200011818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/exc7h6tz",nocase; classtype:attempted-recon; sid:200011819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/ez2wd7tg",nocase; classtype:attempted-recon; sid:200011820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/g3_8_2z5",nocase; classtype:attempted-recon; sid:200011821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/g45cgcft",nocase; classtype:attempted-recon; sid:200011822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/g6y3fhkt",nocase; classtype:attempted-recon; sid:200011823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gbs4ecw8",nocase; classtype:attempted-recon; sid:200011824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gfudg_bw",nocase; classtype:attempted-recon; sid:200011825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gm9mx7ii",nocase; classtype:attempted-recon; sid:200011826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/grxqxr5n",nocase; classtype:attempted-recon; sid:200011827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gtqqwvzn",nocase; classtype:attempted-recon; sid:200011828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lnkd.in",nocase; http_uri; content:"/gxsukn_z?=hmawyn6k",nocase; classtype:attempted-recon; sid:200011829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lojascarrefouronline.com",nocase; http_uri; content:"/product/smartphone-samsung-galaxy-a10s-32gb-4g-wi-fi-tela-6-2-dual-chip-2gb-ram-camera-dupla-selfie-8mp-vermelho/?variant=1625&\;amp\;utm_medium=cpc&\;amp\;utm_source=google&\;amp\;utm_campaign=google%20shopping",nocase; classtype:attempted-recon; sid:200011830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lolosamarte.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"loopedcupes.com",nocase; http_uri; content:"/?s1=351089&\;s2=745890592&\;s3=2357&\;s4=0&\;ow=&\;s10=739",nocase; classtype:attempted-recon; sid:200011832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lp.vp4.me",nocase; http_uri; content:"/ppt9",nocase; classtype:attempted-recon; sid:200011833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lps.doja-marketing.com",nocase; http_uri; content:"/tcor_7321_1_th_djm/?subc=wbgpj43lcqvdktegimhi7654&\;coc=ld_th_otb_1399_tcor&\;voluum_campaign=2ca79e47-cd55-4b9f-9fb8-b2d6ed7acacb&\;widget=&\;target=&\;offerid=08cf9662-7ff6-49fb-b317-956e01793278",nocase; classtype:attempted-recon; sid:200011834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lps.motor-marketings.com",nocase; http_uri; content:"/cbpp_7227_1_es_lat_mtm",nocase; classtype:attempted-recon; sid:200011835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lps.motor-marketings.com",nocase; http_uri; content:"/cbpp_7227_1_es_lat_mtm/",nocase; classtype:attempted-recon; sid:200011836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"lynk.id",nocase; http_uri; content:"/claimskinn",nocase; classtype:attempted-recon; sid:200011837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"m.me",nocase; http_uri; content:"/stimulusbenefit9090",nocase; classtype:attempted-recon; sid:200011838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccasaseerosds.smccosasod.jwwyumt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.1m5h7d1t.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maccaserosds.smasod.dbogayat.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.xdwuuu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macsscsrd-asosamsnsrd.yeceku.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/almost2.html",nocase; classtype:attempted-recon; sid:200011844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s1.html",nocase; classtype:attempted-recon; sid:200011845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s2.html",nocase; classtype:attempted-recon; sid:200011846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s3.html",nocase; classtype:attempted-recon; sid:200011847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s4.html",nocase; classtype:attempted-recon; sid:200011848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s5.html",nocase; classtype:attempted-recon; sid:200011849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s6.html",nocase; classtype:attempted-recon; sid:200011850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/s7.html",nocase; classtype:attempted-recon; sid:200011851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"macst.cc",nocase; http_uri; content:"/ue/retailresearch.emirates.claim.gift-cards/subscribe.html",nocase; classtype:attempted-recon; sid:200011852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magento-shops.be",nocase; http_uri; content:"/index.html/sharepwdoc",nocase; classtype:attempted-recon; sid:200011853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"magyarpoosta.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post.html",nocase; classtype:attempted-recon; sid:200011854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.hfcfit.com",nocase; http_uri; content:"/forms/forms/form1.html",nocase; classtype:attempted-recon; sid:200011855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mail.lcneighborhood-it.com",nocase; http_uri; content:"/citizen-account-verification-monikariecke/",nocase; classtype:attempted-recon; sid:200011856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mandatorydeal.co.za",nocase; http_uri; content:"/wp/wp-includes/blocks/.2/n1.html",nocase; classtype:attempted-recon; sid:200011857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.516eat.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maocsaoconmrd.ascesoemdrd.ourpet.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"maosaocnmrd.asoemdrd.dadasport.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.2icng1zt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.5djao08t.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.angelet.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.bnco6fht.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.dmcl010t.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.filmart.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsorord.masosmdeod.foodmart.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.int-shirt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrasessod.caosccosmend.jwwyumt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mascsrssod.caosmend.finepoint.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mastologia.cl",nocase; http_uri; content:"/msrf/",nocase; classtype:attempted-recon; sid:200011871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mb102.com",nocase; http_uri; content:"/lnk.asp",nocase; classtype:attempted-recon; sid:200011872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"me2.kr",nocase; http_uri; content:"/jivc7",nocase; classtype:attempted-recon; sid:200011873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"megatherm-dev.in",nocase; http_uri; content:"/baba/mail.ionos.com/common/auth/email-authentication-id8478388377488299287474729299942949947927449589398/user-session/auth0f38575889948399385943/?email=redacted@abuse.ionos.com",nocase; classtype:attempted-recon; sid:200011874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"members.har.com",nocase; http_uri; content:"/sites/kellerwilliamshouston/linkout.cfm?office=http://www.hm.com&to=https://dev-fvazquejr4.pantheonsite.io/index.html#example@example.com",nocase; classtype:attempted-recon; sid:200011875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mindfree.co.za",nocase; http_uri; content:"/.data/.configure/.2/n1.html",nocase; classtype:attempted-recon; sid:200011876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miurausa.com",nocase; http_uri; content:"/miurausa/?em=ardanbera@ardanbera.com",nocase; classtype:attempted-recon; sid:200011877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"miurausa.com",nocase; http_uri; content:"/miurausa?em=ardanbera@ardanbera.com",nocase; classtype:attempted-recon; sid:200011878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mmtro.com",nocase; http_uri; content:"/c?tagid=6565567-e43649793250da163478de2807c5c809&\;idc=77972&\;redir=https://loginingmocrosofttbox.pllatos.com/?e=@emba.schulich.yorku.ca&\;",nocase; classtype:attempted-recon; sid:200011879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.2icng1zt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.5djao08t.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.filmart.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.g19jl7at.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"mscasoserd.maccasased.m5gr7bnt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"msha.ke",nocase; http_uri; content:"/vocerbelanja/#webs",nocase; classtype:attempted-recon; sid:200011885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/609890b8001f18095ac075fc",nocase; classtype:attempted-recon; sid:200011886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/60deff002ca34f5aa4985ab3",nocase; classtype:attempted-recon; sid:200011887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/6112452ca3f6e60d511bad0d",nocase; classtype:attempted-recon; sid:200011888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/61fbd0ed6ab665110baf7c8d",nocase; classtype:attempted-recon; sid:200011889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/6216d491976b950bb612ee29",nocase; classtype:attempted-recon; sid:200011890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/6217e24f976b950bb6148afa",nocase; classtype:attempted-recon; sid:200011891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/622ef84817a64c6cae942da3",nocase; classtype:attempted-recon; sid:200011892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/622f257117a64c6cae9476f7",nocase; classtype:attempted-recon; sid:200011893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62528753e911ef58a52499d4",nocase; classtype:attempted-recon; sid:200011894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/628e2c9dbd94a175bb6fe784",nocase; classtype:attempted-recon; sid:200011895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/629dc004bd94a175bb87e88a",nocase; classtype:attempted-recon; sid:200011896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62a096d7bd94a175bb8dc8ec",nocase; classtype:attempted-recon; sid:200011897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62a44bd3bd94a175bb93ccfe",nocase; classtype:attempted-recon; sid:200011898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62aab8d4bd94a175bb9d8b2d",nocase; classtype:attempted-recon; sid:200011899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62ab0092bd94a175bb9df796",nocase; classtype:attempted-recon; sid:200011900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62ab0b05bd94a175bb9e08f3",nocase; classtype:attempted-recon; sid:200011901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/form/62b729dcbd94a175bbb0a072",nocase; classtype:attempted-recon; sid:200011902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/jenetwood/untitled-form-1",nocase; classtype:attempted-recon; sid:200011903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/layananpihakfacebook/resmipemblokiranfacebook",nocase; classtype:attempted-recon; sid:200011904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.forms.app",nocase; http_uri; content:"/rayzmania1/capitecbankdebitcheckmandate",nocase; classtype:attempted-recon; sid:200011905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"my.visme.co",nocase; http_uri; content:"/view/epy7xq3y-office-365",nocase; classtype:attempted-recon; sid:200011906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacaseosb.saoeosnb.1m5h7d1t.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.xdwuuu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjacsasoesb-caosmsoeb.yeceku.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.dmcl010t.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.foodmart.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.g19jl7at.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsecb.myjaacsseb.oeko-test.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.516eat.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.dadasport.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjascsmoenb.aaosmb.qjlxqjrjt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.int-shirt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseaseosob.jsaoccoseosb.jwwyumt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjaseosob.jsaoeosb.finepoint.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjassodnscb.nasomb.dadasport.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.int-shirt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.jwwyumt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaoasesend.amsoccoserd.tsylst.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjcaosend.amsoerd.finepoint.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.2icng1zt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.m5gr7bnt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"myjsaesob.myaasb.pr-agent.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200011927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"n9.cl",nocase; http_uri; content:"/en/b/5j9l4",nocase; classtype:attempted-recon; sid:200011928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nadyacademy.com",nocase; http_uri; content:"/citlz/citi/citizen_bank/login.php",nocase; classtype:attempted-recon; sid:200011929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/2hhwdm",nocase; classtype:attempted-recon; sid:200011930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/6kxp6p",nocase; classtype:attempted-recon; sid:200011931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/hxnuzx",nocase; classtype:attempted-recon; sid:200011932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/k4jcff",nocase; classtype:attempted-recon; sid:200011933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/l4khtv",nocase; classtype:attempted-recon; sid:200011934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/pogdut",nocase; classtype:attempted-recon; sid:200011935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/q3euu4",nocase; classtype:attempted-recon; sid:200011936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/qzadbp",nocase; classtype:attempted-recon; sid:200011937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/tutp27",nocase; classtype:attempted-recon; sid:200011938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/vimyln",nocase; classtype:attempted-recon; sid:200011939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"nah.uy",nocase; http_uri; content:"/vwzsnu",nocase; classtype:attempted-recon; sid:200011940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netorg3850966-my.sharepoint.com",nocase; http_uri; content:"/:o:/g/personal/jason_jasoncolemanhomes_com/eugtikeijyhdouwl-ipyk7qbc1efrb9kbobz6gtu0f2moq",nocase; classtype:attempted-recon; sid:200011941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"netorg6600800-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/ginger_gingerfountain_com/_layouts/15/wopiframe.aspx?guestaccesstoken=gpys8ex7ys1urrzbfeasvlexkodtrovmmcpn%2brsnebs%3d&\;docid=1_1882b07b5eb5643d2bdaa63426324ef0e&\;wdformid=%7b9bd54af1%2dee16%2d4e07%2d8d62%2d6e9b76e47512%7d&\;action=formsubmit&\;cid=9adf3e74-8cc1-4e36-b545-c9165fcafde7",nocase; classtype:attempted-recon; sid:200011942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"noulalas.com",nocase; http_uri; content:"/mx/bofa/bofa/bofa/d83fa6e3abe03db88d589b8c4b15a835",nocase; classtype:attempted-recon; sid:200011943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"noulalas.com",nocase; http_uri; content:"/mx/bofa/bofa/bofa/d83fa6e3abe03db88d589b8c4b15a835/",nocase; classtype:attempted-recon; sid:200011944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"noulalas.ravextudio.com",nocase; http_uri; content:"/mx/bofa/bofa/bofa/f1f9541b6018ad0ecc1a9f9291a0cf83/login.php?cmd=login_submit&id=b3892ca065560a4694b1cea631399184b3892ca065560a4694b1cea631399184&session=b3892ca065560a4694b1cea631399184b3892ca065560a4694b1cea631399184",nocase; classtype:attempted-recon; sid:200011945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oiazeiuiazolme.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.live.com",nocase; http_uri; content:"/download?cid=936f66742226eaf0&resid=936f66742226eaf0%21105&authkey=aitnwnmvuumu2oo",nocase; classtype:attempted-recon; sid:200011947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onedrive.live.com",nocase; http_uri; content:"/view.aspx?resid=cd71337cfb2b3ba9!1313&\;ithint=onenote&\;wdo=2&\;authkey=!ajwhinbbsa8ui98",nocase; classtype:attempted-recon; sid:200011948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online-helpchase.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"online.visual-paradigm.com",nocase; http_uri; content:"/app/forms/view/zalxyved/a9adea36-d163-4d46-a3de-0e990d86e78e",nocase; classtype:attempted-recon; sid:200011950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinecasinospark.com",nocase; http_uri; content:"/ions/index.php?email=redacted@abuse.ionos.com",nocase; classtype:attempted-recon; sid:200011951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"onlinehelpchase.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"oronok12mnus-my.sharepoint.com",nocase; http_uri; content:"/:w:/g/personal/lisa_ohalloran_orono_k12_mn_us/ew5u5g4qyatls5vl6tw_qfkb6p4mf5_-uerx77babfo7yq?e=4%3admef63&\;at=9",nocase; classtype:attempted-recon; sid:200011953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"osequip.com",nocase; http_uri; content:"/ala/office/3c3af23026fe449eb6775a81aa72d534/login.php",nocase; classtype:attempted-recon; sid:200011954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"padlet-uploads.storage.googleapis.com",nocase; http_uri; content:"/1682449218/156e09d0ea8e294db3474e54a2df1dc9/download.htm",nocase; classtype:attempted-recon; sid:200011955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pages03.net",nocase; http_uri; content:"/ripleychile/formulario/formulario_opt_out/opt_out?spmailingid=46529866&\;spuserid=mtm1mjmzntkxntc5mqs2&\;spjobid=mjiwmti5njg1mqs2&\;spreportid=mjiwmti5njg1mqs2",nocase; classtype:attempted-recon; sid:200011956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pagesnotificationidentityst.co.vu",nocase; http_uri; content:"/confirmid.php",nocase; classtype:attempted-recon; sid:200011957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paozeia.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pay.1onehost.co.za",nocase; http_uri; content:"/wells/wellsv2/index.html",nocase; classtype:attempted-recon; sid:200011959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypal-inc-userupdatenuber7925570844.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post.html",nocase; classtype:attempted-recon; sid:200011960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"paypal.activefullz.cc",nocase; http_uri; content:"/login.php",nocase; classtype:attempted-recon; sid:200011961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pdfplace.sharonandjoseph.com",nocase; http_uri; content:"/support/nlm/index.html",nocase; classtype:attempted-recon; sid:200011962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"perspectivart.com",nocase; http_uri; content:"/orn.html",nocase; classtype:attempted-recon; sid:200011963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"plugtools.com",nocase; http_uri; content:"/wp-admin/apiv.html",nocase; classtype:attempted-recon; sid:200011964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pmhselect.com",nocase; http_uri; content:"/administrator/js/ch/swisspostbot",nocase; classtype:attempted-recon; sid:200011965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pocoyo.com",nocase; http_uri; content:"/juegos-ninos/habilidad",nocase; classtype:attempted-recon; sid:200011966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fia8mx",nocase; classtype:attempted-recon; sid:200011967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fva4wx",nocase; classtype:attempted-recon; sid:200011968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fvakzx",nocase; classtype:attempted-recon; sid:200011969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ppt.cc",nocase; http_uri; content:"/fvllvx",nocase; classtype:attempted-recon; sid:200011970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"preferences.convertkit-mail.com",nocase; http_uri; content:"/d0uv8808qzu0hxnpoqtl",nocase; classtype:attempted-recon; sid:200011971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pub5.bravenet.com",nocase; http_uri; content:"/emailfwd/show.php?usernum=350311855&\;formid=3879",nocase; classtype:attempted-recon; sid:200011972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/2rc41txe",nocase; classtype:attempted-recon; sid:200011973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/ewqwwwsl",nocase; classtype:attempted-recon; sid:200011974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/in1b4ru",nocase; classtype:attempted-recon; sid:200011975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/izircqqd",nocase; classtype:attempted-recon; sid:200011976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/r6wxsyai",nocase; classtype:attempted-recon; sid:200011977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/uwxh38rr",nocase; classtype:attempted-recon; sid:200011978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/ytmc2hww",nocase; classtype:attempted-recon; sid:200011979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"pxlme.me",nocase; http_uri; content:"/zv8d_zyc",nocase; classtype:attempted-recon; sid:200011980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qr.net",nocase; http_uri; content:"/hixeto",nocase; classtype:attempted-recon; sid:200011981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qr.net",nocase; http_uri; content:"/krbil4",nocase; classtype:attempted-recon; sid:200011982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bczdkg?userid=ad1e2wno",nocase; classtype:attempted-recon; sid:200011983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bd5q48",nocase; classtype:attempted-recon; sid:200011984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrco.de",nocase; http_uri; content:"/bd6jd7",nocase; classtype:attempted-recon; sid:200011985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"qrs.ly",nocase; http_uri; content:"/gmdvgn8",nocase; classtype:attempted-recon; sid:200011986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quip.com",nocase; http_uri; content:"/jeh2aebbsh97",nocase; classtype:attempted-recon; sid:200011987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"quip.com",nocase; http_uri; content:"/qv7malu8n7cz/you-have-some-messages-pending",nocase; classtype:attempted-recon; sid:200011988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rabofree.blogspot.com",nocase; http_uri; content:"/2020?m=1",nocase; classtype:attempted-recon; sid:200011989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rcl.ink",nocase; http_uri; content:"/dwi5d?/pages/services/2022",nocase; classtype:attempted-recon; sid:200011990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"readmodel.m.sogou.com",nocase; http_uri; content:"/medical?pc_url=https://health.usnews.com/doctors/li-lei-1012630&securl=ghy1rdnmwlqytqu2rfrhtf27kllqk76w&type=wap&wap_url=https://mail.ionos.com/",nocase; classtype:attempted-recon; sid:200011991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"realizesolucoesfinanceiras.com.br",nocase; http_uri; content:"/cartoes-renner/login",nocase; classtype:attempted-recon; sid:200011992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reamaam.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/5yqj310",nocase; classtype:attempted-recon; sid:200011994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/97jby6x",nocase; classtype:attempted-recon; sid:200011995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/g8npsq6",nocase; classtype:attempted-recon; sid:200011996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rebrand.ly",nocase; http_uri; content:"/km0s416/#info@jmjgroup.co.in",nocase; classtype:attempted-recon; sid:200011997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rectifywebwallet.com",nocase; http_uri; content:"/home.php",nocase; classtype:attempted-recon; sid:200011998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"redatofadesafe.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200011999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reikreitel.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200012000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"renew.trusted-travelers-online.com",nocase; http_uri; content:"/renew-global-entry",nocase; classtype:attempted-recon; sid:200012001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"res.cloudinary.com",nocase; http_uri; content:"/crocket-petroleum/raw/upload/v1647375514/outstanding_invoice_iogosw.html",nocase; classtype:attempted-recon; sid:200012002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reurl.cc",nocase; http_uri; content:"/6e9zk5",nocase; classtype:attempted-recon; sid:200012003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reurl.cc",nocase; http_uri; content:"/g2emzn?coinbase?shiny",nocase; classtype:attempted-recon; sid:200012004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reurl.cc",nocase; http_uri; content:"/xeknoz?confirmation",nocase; classtype:attempted-recon; sid:200012005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reurl.cc",nocase; http_uri; content:"/xgmxr1",nocase; classtype:attempted-recon; sid:200012006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"reviewbook.org",nocase; http_uri; content:"/ocwtxsel7/neitcit/citi/index.php",nocase; classtype:attempted-recon; sid:200012007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rezunz.quip.com",nocase; http_uri; content:"/2d0jazx1eky5/click-here-to-verify-your-email",nocase; classtype:attempted-recon; sid:200012008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"riderctposten.blogspot.com",nocase; http_uri; content:"/2021/02/blog-post.html",nocase; classtype:attempted-recon; sid:200012009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"robinettearchitect.com",nocase; http_uri; content:"/wp-includes/widgets/ea8a/postch.php",nocase; classtype:attempted-recon; sid:200012010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"robinettearchitect.com",nocase; http_uri; content:"/wp-includes/widgets/ea8a/redirect.php?id=7c18c315d71119489192f48f2b84ad73",nocase; classtype:attempted-recon; sid:200012011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rplg.co",nocase; http_uri; content:"/920970d0",nocase; classtype:attempted-recon; sid:200012012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"rsmpoly.org",nocase; http_uri; content:"/wp-content/wflogs/wfcrop/geolite/femsinoa/reprovadoer/zieixcgerghfv.htm?eer=info@vanhilten.eu",nocase; classtype:attempted-recon; sid:200012013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-18yrq",nocase; classtype:attempted-recon; sid:200012014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-19b9l",nocase; classtype:attempted-recon; sid:200012015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-19bbd",nocase; classtype:attempted-recon; sid:200012016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-19bcl",nocase; classtype:attempted-recon; sid:200012017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-19bjb?verifypageacoountcenter2022/",nocase; classtype:attempted-recon; sid:200012018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-19c6m",nocase; classtype:attempted-recon; sid:200012019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-19cfm",nocase; classtype:attempted-recon; sid:200012020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/-19ism",nocase; classtype:attempted-recon; sid:200012021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/15n1z",nocase; classtype:attempted-recon; sid:200012022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/16cll",nocase; classtype:attempted-recon; sid:200012023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/182cg",nocase; classtype:attempted-recon; sid:200012024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/188i5?as3bg45am?/pages/services/2022",nocase; classtype:attempted-recon; sid:200012025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/18hbc?/pages/services/2022",nocase; classtype:attempted-recon; sid:200012026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/19vpe?https://www.irs.gov/filing/wheres-my-amended-return.com/profileid=1059533",nocase; classtype:attempted-recon; sid:200012027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/19wgs?https://www.irs.gov/filing/wheres-my-amended-return.com/profileid=1313305",nocase; classtype:attempted-recon; sid:200012028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/19wgs?https://www.irs.gov/filing/wheres-my-amended-return.com/profileid=8827493",nocase; classtype:attempted-recon; sid:200012029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s.id",nocase; http_uri; content:"/govirs",nocase; classtype:attempted-recon; sid:200012030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s3-us-west-2.amazonaws.com",nocase; http_uri; content:"/nyan8uxw2yntuymuz/m5fc54pvun7oy#un/5047_md/5/2075/4141/74/41810",nocase; classtype:attempted-recon; sid:200012031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s3.amazonaws.com",nocase; http_uri; content:"/appforest_uf/f1655913894999x603343842310150300/0fficemicro.html#test@example.com",nocase; classtype:attempted-recon; sid:200012032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"s3.amazonaws.com",nocase; http_uri; content:"/oilykutjdhrsgehrkgfhgdvgsrhmiad10/1aesrjtrgaedjfgjfhs.html",nocase; classtype:attempted-recon; sid:200012033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"samirsonte.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200012034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sandert12.blogspot.com",nocase; http_uri; content:"/p/la-banque-postale.html",nocase; classtype:attempted-recon; sid:200012035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sceiplc.com",nocase; http_uri; content:"/image/images/",nocase; classtype:attempted-recon; sid:200012036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sceiplc.com",nocase; http_uri; content:"/image/images/getmypayment.html",nocase; classtype:attempted-recon; sid:200012037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"script.google.com",nocase; http_uri; content:"/macros/s/akfycbxldfmsdlmc1xmyfvmhpijk0qxsnxurlh95jzz3qcvmodhollh-cgwk3ql47_ntzyajzw/exec",nocase; classtype:attempted-recon; sid:200012038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sdzakfahz.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200012039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.eexzu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200012040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.ouamu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200012041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seamb-saacmb.scvau.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200012042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sefonta.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200012043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"seonewsservic.blogspot.com",nocase; http_uri; content:"/p/postenno_9.html",nocase; classtype:attempted-recon; sid:200012044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfo3.digitaloceanspaces.com",nocase; http_uri; content:"/omd8ywudgw2o7ya082/%21%24%21%24.%26%26%3eo.%21/%21%24%21%24.o.m.%26%26%21%24%21%24.html#a@b.com",nocase; classtype:attempted-recon; sid:200012045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sfo3.digitaloceanspaces.com",nocase; http_uri; content:"/omd8ywudgw2o7ya082/%21%24%21%24.%26%26%3eo.%21/%21%24%21%24.o.m.%26%26%21%24%21%24.html?err=pwr3hakqsgpoki0ntkb&dispatch=2ba&id=acc070ccc82c98b9acba5347acc0ab#user@example.org",nocase; classtype:attempted-recon; sid:200012046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgdb91700-my.sharepoint.com",nocase; http_uri; content:"/:b:/g/personal/jean-claude-fernandes_sgdb91_com/exk2a_c6xsxouopoew83oxib65oghw_co2bz33les1rdxw",nocase; classtype:attempted-recon; sid:200012047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgp1.digitaloceanspaces.com",nocase; http_uri; content:"/comm270622/landis.htm",nocase; classtype:attempted-recon; sid:200012048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgp1.digitaloceanspaces.com",nocase; http_uri; content:"/j7trucking467/3sndftr.html",nocase; classtype:attempted-recon; sid:200012049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sgp1.digitaloceanspaces.com",nocase; http_uri; content:"/r4inspections.com/index.htm",nocase; classtype:attempted-recon; sid:200012050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.hsforms.com",nocase; http_uri; content:"/11c1i3ucrsjaeqnyxinop6ad5rxo",nocase; classtype:attempted-recon; sid:200012051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.hsforms.com",nocase; http_uri; content:"/1fni_ent2sao6wqv0vzdn7g8nl9d",nocase; classtype:attempted-recon; sid:200012052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"share.hsforms.com",nocase; http_uri; content:"/1onniqroftvoytwpvbgznvgd5749",nocase; classtype:attempted-recon; sid:200012053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shared-document.com",nocase; http_uri; content:"/basic.php?k=d63621ef3dc01735479befc13f97ec7fdb68991d",nocase; classtype:attempted-recon; sid:200012054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sharonandjoseph.com",nocase; http_uri; content:"//log/temp.php?email=admin@example.com",nocase; classtype:attempted-recon; sid:200012055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shoejerry.com",nocase; http_uri; content:"/readme.php",nocase; classtype:attempted-recon; sid:200012056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shorturl.at",nocase; http_uri; content:"/nqgu1",nocase; classtype:attempted-recon; sid:200012057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"shushtem.com",nocase; http_uri; content:"/bq/cap/",nocase; classtype:attempted-recon; sid:200012058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/3agmllvpeuolaoifyudhudwmjxbc9dgpvtrrk87uqsnqpw",nocase; classtype:attempted-recon; sid:200012059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/3ahssrdtw6283skqeq9ranyubnjvy3bsmb5gtv67qj5ewa",nocase; classtype:attempted-recon; sid:200012060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"siasky.net",nocase; http_uri; content:"/pacsbf7vnvmwzffw6soiorasax1wl56hdom9ughw23jtuq",nocase; classtype:attempted-recon; sid:200012061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"simp.ly",nocase; http_uri; content:"/publish/xhrdvc",nocase; classtype:attempted-recon; sid:200012062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/a/sy4norton.com/setup/home",nocase; classtype:attempted-recon; sid:200012063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/amricalturs.net/download4/microsoft-office-365",nocase; classtype:attempted-recon; sid:200012064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/n12-netempresarial.com/empresa-nerd-n12/in%c3%adcio",nocase; classtype:attempted-recon; sid:200012065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/newservices.website/orange-mobiles/home",nocase; classtype:attempted-recon; sid:200012066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/newservices.website/service-reglement/",nocase; classtype:attempted-recon; sid:200012067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/newservices.website/service-reglement/home",nocase; classtype:attempted-recon; sid:200012068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/e9d24c72/23524457",nocase; classtype:attempted-recon; sid:200012069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/habbotuttogratis",nocase; classtype:attempted-recon; sid:200012070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/habbotuttogratis/assignments",nocase; classtype:attempted-recon; sid:200012071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/libretyreserve",nocase; classtype:attempted-recon; sid:200012072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/libretyreserve/",nocase; classtype:attempted-recon; sid:200012073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/protectedinmprovmnt44/",nocase; classtype:attempted-recon; sid:200012074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/safetycheck427064200647221/",nocase; classtype:attempted-recon; sid:200012075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/site/verifycheckpointpaqes/",nocase; classtype:attempted-recon; sid:200012076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/019businessusersbt782btsignin/secure-update-com",nocase; classtype:attempted-recon; sid:200012077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/08ie-securepage-facebook",nocase; classtype:attempted-recon; sid:200012078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/09securebusinessusersonly-/secure-bt-com",nocase; classtype:attempted-recon; sid:200012079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/0iey-securepage-facebook",nocase; classtype:attempted-recon; sid:200012080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/12noreplybtuserconnect365offic/secure-bt-com",nocase; classtype:attempted-recon; sid:200012081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/1mailxverificatio/home",nocase; classtype:attempted-recon; sid:200012082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/2-orangebank-salva/accueil",nocase; classtype:attempted-recon; sid:200012083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/3-orangebank-vetch/accueil",nocase; classtype:attempted-recon; sid:200012084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/302dir/accueil",nocase; classtype:attempted-recon; sid:200012085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/3254798fr78/uigiugi",nocase; classtype:attempted-recon; sid:200012086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/4-orangebank-toto/accueil",nocase; classtype:attempted-recon; sid:200012087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/565f34/microsoft-office-365",nocase; classtype:attempted-recon; sid:200012088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/65h7t65ygtdw5f4/bt",nocase; classtype:attempted-recon; sid:200012089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/65q-securepage-facebook",nocase; classtype:attempted-recon; sid:200012090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/98w72securebusinessbt-01/secure-update-com",nocase; classtype:attempted-recon; sid:200012091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/a3y-securepage-facebook",nocase; classtype:attempted-recon; sid:200012092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/abonnevocalweb/accueil?authuser=5",nocase; classtype:attempted-recon; sid:200012093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/abuse-privacy/",nocase; classtype:attempted-recon; sid:200012094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/access-office-aud-msg-us/home",nocase; classtype:attempted-recon; sid:200012095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/access-office-docxpdf-call-net/home",nocase; classtype:attempted-recon; sid:200012096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/access-voice-mail-pay-us/home",nocase; classtype:attempted-recon; sid:200012097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/accs-office-ml/home",nocase; classtype:attempted-recon; sid:200012098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/accs-p-o-us/home",nocase; classtype:attempted-recon; sid:200012099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/accsoffice-usa/home",nocase; classtype:attempted-recon; sid:200012100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/activationagrisecuriplus/accueil",nocase; classtype:attempted-recon; sid:200012101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/adrianoferriani/",nocase; classtype:attempted-recon; sid:200012102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/alert-app-pages/",nocase; classtype:attempted-recon; sid:200012103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/amporangefr/accueil",nocase; classtype:attempted-recon; sid:200012104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/amsohappy/home",nocase; classtype:attempted-recon; sid:200012105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/app-mobile-uuid/recovery",nocase; classtype:attempted-recon; sid:200012106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/appli-ob-securite/accueil",nocase; classtype:attempted-recon; sid:200012107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/appli-ob/accueil",nocase; classtype:attempted-recon; sid:200012108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/appli-obank-serv/accueil",nocase; classtype:attempted-recon; sid:200012109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/appli-scur-obankps/accueil",nocase; classtype:attempted-recon; sid:200012110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/applkactu/accueil",nocase; classtype:attempted-recon; sid:200012111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/apps-authentification-forte-ob/accueil",nocase; classtype:attempted-recon; sid:200012112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/apps-mbl2/accueil",nocase; classtype:attempted-recon; sid:200012113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/apps-obank-apli/accueil",nocase; classtype:attempted-recon; sid:200012114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/apps-secure-ob/accueil",nocase; classtype:attempted-recon; sid:200012115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/apps-securite-ob/accueil",nocase; classtype:attempted-recon; sid:200012116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/aqwsas",nocase; classtype:attempted-recon; sid:200012117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/asdfghjklhgfdsdfgh/home",nocase; classtype:attempted-recon; sid:200012118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/atendimento-online-emissao/in%c3%adcio",nocase; classtype:attempted-recon; sid:200012119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/atendimentomarnobre/p%c3%a1gina-inicial",nocase; classtype:attempted-recon; sid:200012120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/att-home/home",nocase; classtype:attempted-recon; sid:200012121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/att-mail-update/home",nocase; classtype:attempted-recon; sid:200012122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/att-managements/home",nocase; classtype:attempted-recon; sid:200012123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attemailfox7/home",nocase; classtype:attempted-recon; sid:200012124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attemler7/home",nocase; classtype:attempted-recon; sid:200012125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attfeatures/home",nocase; classtype:attempted-recon; sid:200012126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attmaillogservise/attmail",nocase; classtype:attempted-recon; sid:200012127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attndattndatt/home",nocase; classtype:attempted-recon; sid:200012128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attnet-104921/att",nocase; classtype:attempted-recon; sid:200012129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attnetlogsignmail/att-net",nocase; classtype:attempted-recon; sid:200012130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attnetlogsservce/att-net",nocase; classtype:attempted-recon; sid:200012131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attonline00/home",nocase; classtype:attempted-recon; sid:200012132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attserv111cust/home",nocase; classtype:attempted-recon; sid:200012133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attttstttegegrsksw/home",nocase; classtype:attempted-recon; sid:200012134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attudnie/home",nocase; classtype:attempted-recon; sid:200012135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attupdateobo/home",nocase; classtype:attempted-recon; sid:200012136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attweb22/home",nocase; classtype:attempted-recon; sid:200012137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attweblysiteupgrade/home",nocase; classtype:attempted-recon; sid:200012138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/attyahooohroffice231/home",nocase; classtype:attempted-recon; sid:200012139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authen-secure-obank/accueil",nocase; classtype:attempted-recon; sid:200012140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentification-apps-ob/accueil",nocase; classtype:attempted-recon; sid:200012141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentification-ob/accueil",nocase; classtype:attempted-recon; sid:200012142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentification-orangebank-eu/accueil",nocase; classtype:attempted-recon; sid:200012143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/authentifications-ob/accueil",nocase; classtype:attempted-recon; sid:200012144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/awspage",nocase; classtype:attempted-recon; sid:200012145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/background-in",nocase; classtype:attempted-recon; sid:200012146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bacopremolista/accueil",nocase; classtype:attempted-recon; sid:200012147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/baltimoreassessoria",nocase; classtype:attempted-recon; sid:200012148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/banquepostalebanqueetassurance/accueil",nocase; classtype:attempted-recon; sid:200012149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bbroadband110/home?authuser=4",nocase; classtype:attempted-recon; sid:200012150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bbtbroadband/home?authuser=9",nocase; classtype:attempted-recon; sid:200012151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bcp-mille/home-page",nocase; classtype:attempted-recon; sid:200012152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/benachrichtigung-sparkasse/accueil",nocase; classtype:attempted-recon; sid:200012153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/biorange/",nocase; classtype:attempted-recon; sid:200012154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/broadbandplc/home",nocase; classtype:attempted-recon; sid:200012155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-2022-user/home",nocase; classtype:attempted-recon; sid:200012156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-cloud-voice-review-voice/bt-voice-cloud",nocase; classtype:attempted-recon; sid:200012157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-clould-preview000112/voice010101010bt-cloud?authuser=8",nocase; classtype:attempted-recon; sid:200012158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-pdf-receipt-payment/www-bt-pdf?authuser=8",nocase; classtype:attempted-recon; sid:200012159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-users/secure-business-bt-com",nocase; classtype:attempted-recon; sid:200012160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bt-voice1010010/bt-voicemesaage10120201002?authuser=8",nocase; classtype:attempted-recon; sid:200012161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbillreview/home",nocase; classtype:attempted-recon; sid:200012162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbraodbandteam/home",nocase; classtype:attempted-recon; sid:200012163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbriadbandteam/home",nocase; classtype:attempted-recon; sid:200012164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadbandlin/home",nocase; classtype:attempted-recon; sid:200012165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadbandplc/home?authuser=7",nocase; classtype:attempted-recon; sid:200012166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadbandplc1/home?authuser=1",nocase; classtype:attempted-recon; sid:200012167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadbandteam/home?authuser=5",nocase; classtype:attempted-recon; sid:200012168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadbandweb/home",nocase; classtype:attempted-recon; sid:200012169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbroadli/home",nocase; classtype:attempted-recon; sid:200012170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbtbtbtbtbtcomm/home",nocase; classtype:attempted-recon; sid:200012171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btbusinessx/bt",nocase; classtype:attempted-recon; sid:200012172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btcloudpaymentinvoice202000/httpsbtcloudvm-voice-new?authuser=1",nocase; classtype:attempted-recon; sid:200012173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btcloudvoice-mv0001/home?authuser=3",nocase; classtype:attempted-recon; sid:200012174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btconnectbusiness/btconnect",nocase; classtype:attempted-recon; sid:200012175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btconnectmailserver/home",nocase; classtype:attempted-recon; sid:200012176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btconnectsecurebusinesbtcom/bt-connect",nocase; classtype:attempted-recon; sid:200012177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btemailwebmailer/home",nocase; classtype:attempted-recon; sid:200012178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btintern/bt-com",nocase; classtype:attempted-recon; sid:200012179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btinternet42day/home",nocase; classtype:attempted-recon; sid:200012180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btinternetco/home",nocase; classtype:attempted-recon; sid:200012181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btmailerupdatee/home",nocase; classtype:attempted-recon; sid:200012182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btmv-voice-notice011/btvoicemessage?authuser=8",nocase; classtype:attempted-recon; sid:200012183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btnvm-urgentnotice/btvmnew-note?authuser=1",nocase; classtype:attempted-recon; sid:200012184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btserver10/home",nocase; classtype:attempted-recon; sid:200012185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btsuporteamsup/home",nocase; classtype:attempted-recon; sid:200012186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttbriadbandteam/home",nocase; classtype:attempted-recon; sid:200012187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttbusinesssss/home",nocase; classtype:attempted-recon; sid:200012188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecom/home?authuser=1",nocase; classtype:attempted-recon; sid:200012189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecomm-/home?authuser=5",nocase; classtype:attempted-recon; sid:200012190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecomm0/home?authuser=2",nocase; classtype:attempted-recon; sid:200012191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecommication/home",nocase; classtype:attempted-recon; sid:200012192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecommservice/home?authuser=5",nocase; classtype:attempted-recon; sid:200012193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/bttelecommunication-plc/home?authuser=2",nocase; classtype:attempted-recon; sid:200012194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btuiytretyudfgjh/home",nocase; classtype:attempted-recon; sid:200012195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btwebmailww/home",nocase; classtype:attempted-recon; sid:200012196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btwebsuppor/home",nocase; classtype:attempted-recon; sid:200012197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btweeb/home",nocase; classtype:attempted-recon; sid:200012198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/btworkking/home",nocase; classtype:attempted-recon; sid:200012199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/businesbtnewbroadband-hub/update-bt-com",nocase; classtype:attempted-recon; sid:200012200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/business-btbtb-office365/secure-bt-business-com?authuse%20r=3",nocase; classtype:attempted-recon; sid:200012201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/business-btbtb-office365/secure-bt-business-com?authuser=3",nocase; classtype:attempted-recon; sid:200012202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/businessbtxpress/update-bt-com",nocase; classtype:attempted-recon; sid:200012203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/capitaloneloginus/home",nocase; classtype:attempted-recon; sid:200012204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ccjkc/home",nocase; classtype:attempted-recon; sid:200012205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/certiauthavril/accueil",nocase; classtype:attempted-recon; sid:200012206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/cgnvzmx/att",nocase; classtype:attempted-recon; sid:200012207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/chamekesa/accueil",nocase; classtype:attempted-recon; sid:200012208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/chamekesa/accueil?authuser=3",nocase; classtype:attempted-recon; sid:200012209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/chamfare/accueil",nocase; classtype:attempted-recon; sid:200012210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/charlisto/accueil",nocase; classtype:attempted-recon; sid:200012211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/clickpagenewlogin2021",nocase; classtype:attempted-recon; sid:200012212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/clxyxsnh/home",nocase; classtype:attempted-recon; sid:200012213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/coinsbuysellswapcryptocurrency/?fbclid=iwar2isl9xfxxgcxtftml2hmcl_dglhshlkfkpdotycyqu-qjqqfdqm9whtfm",nocase; classtype:attempted-recon; sid:200012214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/comfimobiekdofl/accueil",nocase; classtype:attempted-recon; sid:200012215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/community-pages-app/",nocase; classtype:attempted-recon; sid:200012216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/condado-duo-luis-pagan-/home",nocase; classtype:attempted-recon; sid:200012217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/confirmation-orangabank/accueil",nocase; classtype:attempted-recon; sid:200012218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/confirmationacces",nocase; classtype:attempted-recon; sid:200012219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/confirmationacces/verify-pages",nocase; classtype:attempted-recon; sid:200012220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/connectionperdue/accueil",nocase; classtype:attempted-recon; sid:200012221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/connectolo/accueil",nocase; classtype:attempted-recon; sid:200012222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/connectsvqq",nocase; classtype:attempted-recon; sid:200012223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/control-service/home",nocase; classtype:attempted-recon; sid:200012224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/controlpanel-ovh?/48700315fr640w648",nocase; classtype:attempted-recon; sid:200012225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/couldie/accueil",nocase; classtype:attempted-recon; sid:200012226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ctz03",nocase; classtype:attempted-recon; sid:200012227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/currentlyserver/home",nocase; classtype:attempted-recon; sid:200012228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/cvrpd/home",nocase; classtype:attempted-recon; sid:200012229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/d-aps-orge-secure/accueil",nocase; classtype:attempted-recon; sid:200012230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dambt/home?authuser=6",nocase; classtype:attempted-recon; sid:200012231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/damilolwas/home",nocase; classtype:attempted-recon; sid:200012232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/damilosadde/home?authuser=7",nocase; classtype:attempted-recon; sid:200012233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dasbvmk/home",nocase; classtype:attempted-recon; sid:200012234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/debloquagedescompte/page",nocase; classtype:attempted-recon; sid:200012235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dfghjhckuyf/home",nocase; classtype:attempted-recon; sid:200012236; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dfghjhl/home",nocase; classtype:attempted-recon; sid:200012237; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dgjhjjojhgffg/accueil",nocase; classtype:attempted-recon; sid:200012238; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dhddfhdfhcom/att",nocase; classtype:attempted-recon; sid:200012239; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/directionobweb/accueil",nocase; classtype:attempted-recon; sid:200012240; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dispo-obankweb/accueil",nocase; classtype:attempted-recon; sid:200012241; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/divsec20/accueil",nocase; classtype:attempted-recon; sid:200012242; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dkdfkazii-ofoqisjaz1wk/accueil",nocase; classtype:attempted-recon; sid:200012243; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dkekkeole/home",nocase; classtype:attempted-recon; sid:200012244; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/doelza/accueil",nocase; classtype:attempted-recon; sid:200012245; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/dshrkuoiuhgkjkjlkmjyhhfhj/bt",nocase; classtype:attempted-recon; sid:200012246; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/eaglemaddez/accueil",nocase; classtype:attempted-recon; sid:200012247; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/eikp-securepage-facebook",nocase; classtype:attempted-recon; sid:200012248; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/erydkjsdkhfgjfhjdkh/bt",nocase; classtype:attempted-recon; sid:200012249; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/es-pace-clien-ts/",nocase; classtype:attempted-recon; sid:200012250; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espa-ce-de/accueil",nocase; classtype:attempted-recon; sid:200012251; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espace-orange-vocal/accueil",nocase; classtype:attempted-recon; sid:200012252; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espace-vocal-orange/",nocase; classtype:attempted-recon; sid:200012253; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espace-vocalorange-ref0325/",nocase; classtype:attempted-recon; sid:200012254; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espace-vocalorange-ref0325/accueil",nocase; classtype:attempted-recon; sid:200012255; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espaceclientscuritvfvfdsvsf/accueil",nocase; classtype:attempted-recon; sid:200012256; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/espacemessagerieorangesms/accueil",nocase; classtype:attempted-recon; sid:200012257; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/estomcasting/accueil?authuser=1",nocase; classtype:attempted-recon; sid:200012258; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/etyajdnxnskoeprlwyaxbdhfkrituy/btconnect",nocase; classtype:attempted-recon; sid:200012259; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/exodus-wallet-shared-rewards",nocase; classtype:attempted-recon; sid:200012260; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/factu-re-clients/accueil",nocase; classtype:attempted-recon; sid:200012261; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fantasticpage-in",nocase; classtype:attempted-recon; sid:200012262; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fatherplac/accueil",nocase; classtype:attempted-recon; sid:200012263; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/feelblessed/bt-business",nocase; classtype:attempted-recon; sid:200012264; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/feriousca/accueil",nocase; classtype:attempted-recon; sid:200012265; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ffduefuefsbc/att",nocase; classtype:attempted-recon; sid:200012266; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/flmkgknzklfgklfgk/home",nocase; classtype:attempted-recon; sid:200012267; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/form-recovery/",nocase; classtype:attempted-recon; sid:200012268; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/form-recovery/details",nocase; classtype:attempted-recon; sid:200012269; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/france-banque/accueil",nocase; classtype:attempted-recon; sid:200012270; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/frdfhhh/yahoo-mail",nocase; classtype:attempted-recon; sid:200012271; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fscdsh/home",nocase; classtype:attempted-recon; sid:200012272; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/fssghsfd/home",nocase; classtype:attempted-recon; sid:200012273; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gajiview/yahoo-com",nocase; classtype:attempted-recon; sid:200012274; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gdhbfcxzx",nocase; classtype:attempted-recon; sid:200012275; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ggfhftwyjfj/home",nocase; classtype:attempted-recon; sid:200012276; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gmxmailerfttfd/home",nocase; classtype:attempted-recon; sid:200012277; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gmxupdate/home",nocase; classtype:attempted-recon; sid:200012278; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/gsdeaq",nocase; classtype:attempted-recon; sid:200012279; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/h6wrjhcs6tt9fwphome/home",nocase; classtype:attempted-recon; sid:200012280; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hbxchx",nocase; classtype:attempted-recon; sid:200012281; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hccwc/home",nocase; classtype:attempted-recon; sid:200012282; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hfggdfyhcom/yahoo-mail",nocase; classtype:attempted-recon; sid:200012283; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/home-bt-updates/bt-com",nocase; classtype:attempted-recon; sid:200012284; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/home-pages-recovery/details",nocase; classtype:attempted-recon; sid:200012285; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hommem-loggiinnformm/home?authuser=2",nocase; classtype:attempted-recon; sid:200012286; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/httpbtbroadband/home",nocase; classtype:attempted-recon; sid:200012287; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/htvvss/home?authuser=3",nocase; classtype:attempted-recon; sid:200012288; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/hvgfdcftfttf/home",nocase; classtype:attempted-recon; sid:200012289; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ii-securepage-facebook",nocase; classtype:attempted-recon; sid:200012290; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/inf0ssgss/accueil",nocase; classtype:attempted-recon; sid:200012291; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/infoline439pent0line/accueil/untitled-page/fdsls32?authuser=6",nocase; classtype:attempted-recon; sid:200012292; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/invoice-payment-pdf/home",nocase; classtype:attempted-recon; sid:200012293; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/invoicehomepdf/home",nocase; classtype:attempted-recon; sid:200012294; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jcnvvn/home",nocase; classtype:attempted-recon; sid:200012295; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jdvdksf/home",nocase; classtype:attempted-recon; sid:200012296; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jmjmnhvdc/home",nocase; classtype:attempted-recon; sid:200012297; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/jnbhgv/home",nocase; classtype:attempted-recon; sid:200012298; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/juif00012/accueil",nocase; classtype:attempted-recon; sid:200012299; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/kjhydc6yh/home",nocase; classtype:attempted-recon; sid:200012300; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/kjnbhgvcfd/home",nocase; classtype:attempted-recon; sid:200012301; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/koiuld2dkjcxnjk2s/",nocase; classtype:attempted-recon; sid:200012302; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/landbankredirect/home",nocase; classtype:attempted-recon; sid:200012303; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/leafadd/accueil",nocase; classtype:attempted-recon; sid:200012304; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/leafpadrode/accueil",nocase; classtype:attempted-recon; sid:200012305; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/lidl-bg22/bg?fbclid=iwar3vyju-ddafnwfna5hgyotzwb0pjkbcfmwydmyrixienrmngx7gzksmlom",nocase; classtype:attempted-recon; sid:200012306; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/line01-centre/accueil?authuser=2",nocase; classtype:attempted-recon; sid:200012307; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/lkdiur24/accueil/secureli20",nocase; classtype:attempted-recon; sid:200012308; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/lkoeir3190/accueil",nocase; classtype:attempted-recon; sid:200012309; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/llllogin-home-pageaa1/www-btconnect-com",nocase; classtype:attempted-recon; sid:200012310; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/log-inpagenew",nocase; classtype:attempted-recon; sid:200012311; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/loltym/accueil",nocase; classtype:attempted-recon; sid:200012312; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mailtoh/home?read_current=1",nocase; classtype:attempted-recon; sid:200012313; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mailyahooservicesverifynow/home?read_current=1",nocase; classtype:attempted-recon; sid:200012314; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mallhitoh/home",nocase; classtype:attempted-recon; sid:200012315; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mallofuaq/halaman-muka",nocase; classtype:attempted-recon; sid:200012316; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/manager3-controlpanel-ovh",nocase; classtype:attempted-recon; sid:200012317; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/maxatserv/home",nocase; classtype:attempted-recon; sid:200012318; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/maxmaner/home",nocase; classtype:attempted-recon; sid:200012319; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mcwdbvefjberjrwgnwriviwr/home",nocase; classtype:attempted-recon; sid:200012320; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/messagerie-vocalorange-gms-mms/accueil",nocase; classtype:attempted-recon; sid:200012321; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/messagerie-vocalorange/accueil?authuser=2",nocase; classtype:attempted-recon; sid:200012322; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/messageriehtlmxccvsdfvf/accueil",nocase; classtype:attempted-recon; sid:200012323; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/messor/accueil",nocase; classtype:attempted-recon; sid:200012324; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mldof",nocase; classtype:attempted-recon; sid:200012325; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mmanuel/attyahoo",nocase; classtype:attempted-recon; sid:200012326; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mndirilivin-online/verifikasi",nocase; classtype:attempted-recon; sid:200012327; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mnoko",nocase; classtype:attempted-recon; sid:200012328; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mobile-apps-pages/",nocase; classtype:attempted-recon; sid:200012329; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mobile-redirect-system",nocase; classtype:attempted-recon; sid:200012330; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/monbonusclicetmoi/",nocase; classtype:attempted-recon; sid:200012331; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mssft22/home",nocase; classtype:attempted-recon; sid:200012332; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mv-voicepage/home?authuser=8",nocase; classtype:attempted-recon; sid:200012333; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/myatt-home/home",nocase; classtype:attempted-recon; sid:200012334; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/mycoinwallet/",nocase; classtype:attempted-recon; sid:200012335; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/n12-acessologinempresanet",nocase; classtype:attempted-recon; sid:200012336; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/n12-acessologinempresanet/",nocase; classtype:attempted-recon; sid:200012337; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/name29/home",nocase; classtype:attempted-recon; sid:200012338; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/necrologieinfosfroravocal/accueil",nocase; classtype:attempted-recon; sid:200012339; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/nefsuddma/accueil",nocase; classtype:attempted-recon; sid:200012340; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/new-service/home",nocase; classtype:attempted-recon; sid:200012341; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/newbtmissedcall/home",nocase; classtype:attempted-recon; sid:200012342; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/newuploadpage",nocase; classtype:attempted-recon; sid:200012343; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/newvoicemail/home?authuser=1",nocase; classtype:attempted-recon; sid:200012344; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/nextprojectpage",nocase; classtype:attempted-recon; sid:200012345; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/nextprojectpage2022",nocase; classtype:attempted-recon; sid:200012346; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/notice-pagesecure",nocase; classtype:attempted-recon; sid:200012347; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/noticeplaypagenew2021",nocase; classtype:attempted-recon; sid:200012348; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/noticepublicpagenew2021",nocase; classtype:attempted-recon; sid:200012349; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/noticeservice2022",nocase; classtype:attempted-recon; sid:200012350; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/notifcationnoticesystempage",nocase; classtype:attempted-recon; sid:200012351; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/nouveau-sms-message-vocal/accueil",nocase; classtype:attempted-recon; sid:200012352; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-certifier/accueil",nocase; classtype:attempted-recon; sid:200012353; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-identifweb/accueil",nocase; classtype:attempted-recon; sid:200012354; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-seccurite/accueil",nocase; classtype:attempted-recon; sid:200012355; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-securite-/accueil",nocase; classtype:attempted-recon; sid:200012356; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-securite-eu/accueil",nocase; classtype:attempted-recon; sid:200012357; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-securite/accueil",nocase; classtype:attempted-recon; sid:200012358; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-securites/accueil",nocase; classtype:attempted-recon; sid:200012359; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-service/accueil",nocase; classtype:attempted-recon; sid:200012360; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ob-verifie/accueil",nocase; classtype:attempted-recon; sid:200012361; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/obank-authentificat-forte/accueil",nocase; classtype:attempted-recon; sid:200012362; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/obank-securit/accueil",nocase; classtype:attempted-recon; sid:200012363; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/obespaceweb/accueil",nocase; classtype:attempted-recon; sid:200012364; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/office-com-mail/home",nocase; classtype:attempted-recon; sid:200012365; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/office-srv-cnt-us/home",nocase; classtype:attempted-recon; sid:200012366; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/offiice-voice-com/home",nocase; classtype:attempted-recon; sid:200012367; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/online-zkb-0",nocase; classtype:attempted-recon; sid:200012368; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/online-zkb-1",nocase; classtype:attempted-recon; sid:200012369; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/online-zkb-2",nocase; classtype:attempted-recon; sid:200012370; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/onlineemail890/home?authuser=1",nocase; classtype:attempted-recon; sid:200012371; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/onlinefifthercheckaccout/home",nocase; classtype:attempted-recon; sid:200012372; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangbnk/accueil",nocase; classtype:attempted-recon; sid:200012373; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-b-securite/accueil",nocase; classtype:attempted-recon; sid:200012374; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-espace-client1/accueil",nocase; classtype:attempted-recon; sid:200012375; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-facture1/admin",nocase; classtype:attempted-recon; sid:200012376; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-forfaits-et-mobiles",nocase; classtype:attempted-recon; sid:200012377; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-forfaits-et-mobiles/accueil",nocase; classtype:attempted-recon; sid:200012378; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orange-forfaits-et-mobiles/accueil?authuser=1",nocase; classtype:attempted-recon; sid:200012379; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeb-190/accueil",nocase; classtype:attempted-recon; sid:200012380; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeb171/accueil",nocase; classtype:attempted-recon; sid:200012381; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeb221/accueil",nocase; classtype:attempted-recon; sid:200012382; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeba/accueil",nocase; classtype:attempted-recon; sid:200012383; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeban/accueil",nocase; classtype:attempted-recon; sid:200012384; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-22/accueil",nocase; classtype:attempted-recon; sid:200012385; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-r/accueil",nocase; classtype:attempted-recon; sid:200012386; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-sc/accueil",nocase; classtype:attempted-recon; sid:200012387; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebank-secure-secure/accueil",nocase; classtype:attempted-recon; sid:200012388; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebanksecurite/accueil",nocase; classtype:attempted-recon; sid:200012389; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangebannk/accueil",nocase; classtype:attempted-recon; sid:200012390; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeclient2/accueil",nocase; classtype:attempted-recon; sid:200012391; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeclient2/fact458",nocase; classtype:attempted-recon; sid:200012392; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangehtmlcofirmationqcdsvcdvf/accueil",nocase; classtype:attempted-recon; sid:200012393; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeibank/accueil",nocase; classtype:attempted-recon; sid:200012394; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangeinfosvocalnews/accueil",nocase; classtype:attempted-recon; sid:200012395; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangemms/accueil",nocase; classtype:attempted-recon; sid:200012396; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangemyconnect/accueil",nocase; classtype:attempted-recon; sid:200012397; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangesecurishtmlvnc/accueil",nocase; classtype:attempted-recon; sid:200012398; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangesupp",nocase; classtype:attempted-recon; sid:200012399; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangesupp/accueil",nocase; classtype:attempted-recon; sid:200012400; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangevocalwebmaildigital/accueil",nocase; classtype:attempted-recon; sid:200012401; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/oranggebank/accueil",nocase; classtype:attempted-recon; sid:200012402; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/orangiebank/accueil",nocase; classtype:attempted-recon; sid:200012403; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ormas/accueil",nocase; classtype:attempted-recon; sid:200012404; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/p2j/home",nocase; classtype:attempted-recon; sid:200012405; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pagenewlogin2022",nocase; classtype:attempted-recon; sid:200012406; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/paissnsns/accueil",nocase; classtype:attempted-recon; sid:200012407; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pass-press/accueil",nocase; classtype:attempted-recon; sid:200012408; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pass-securit-societe-generale/accueil",nocase; classtype:attempted-recon; sid:200012409; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/paypal-customer-services/",nocase; classtype:attempted-recon; sid:200012410; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/paypal-loginn/",nocase; classtype:attempted-recon; sid:200012411; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pfherjwlsnmcyelwudy/home?authuser=3",nocase; classtype:attempted-recon; sid:200012412; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pleasecheckpoint2021",nocase; classtype:attempted-recon; sid:200012413; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pleaseclickplaypagenew",nocase; classtype:attempted-recon; sid:200012414; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pleaseclicktopage",nocase; classtype:attempted-recon; sid:200012415; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/postacerticodplusaccaccueil/accueil",nocase; classtype:attempted-recon; sid:200012416; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/preferences-coordonnees?bredbanquepopulaire.fr/authentification/transactionnel",nocase; classtype:attempted-recon; sid:200012417; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/projectupdatepage2022",nocase; classtype:attempted-recon; sid:200012418; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/protonmailservice/home",nocase; classtype:attempted-recon; sid:200012419; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pstbrand",nocase; classtype:attempted-recon; sid:200012420; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/pushfarcot/accueil",nocase; classtype:attempted-recon; sid:200012421; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/quickmailer/yahoo-com",nocase; classtype:attempted-recon; sid:200012422; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/quickteamservice/yahoo-com",nocase; classtype:attempted-recon; sid:200012423; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/recatss/accueil",nocase; classtype:attempted-recon; sid:200012424; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/redirect-acctpages-uuid/details",nocase; classtype:attempted-recon; sid:200012425; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/redirectme-to/",nocase; classtype:attempted-recon; sid:200012426; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/redirectmybank/home",nocase; classtype:attempted-recon; sid:200012427; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/regionphfrancecentrerelations/accueil",nocase; classtype:attempted-recon; sid:200012428; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/regionphp/accueil",nocase; classtype:attempted-recon; sid:200012429; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/regl-ement-fac-tu-re/accueil",nocase; classtype:attempted-recon; sid:200012430; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/review00zzz01/bt-home-com",nocase; classtype:attempted-recon; sid:200012431; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/reviewappspagerviicee/",nocase; classtype:attempted-recon; sid:200012432; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/richcoff/bt-business",nocase; classtype:attempted-recon; sid:200012433; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/rimekahsdjg/summary_page",nocase; classtype:attempted-recon; sid:200012434; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/rnorangefisrt/12547op",nocase; classtype:attempted-recon; sid:200012435; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/rvcefte/recovery-suport",nocase; classtype:attempted-recon; sid:200012436; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sadcfasdc?facebook-security/",nocase; classtype:attempted-recon; sid:200012437; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sadfrsg/home",nocase; classtype:attempted-recon; sid:200012438; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/salimkaso/",nocase; classtype:attempted-recon; sid:200012439; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/saudipost-spl",nocase; classtype:attempted-recon; sid:200012440; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sbcglobalm/home?authuser=1",nocase; classtype:attempted-recon; sid:200012441; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sbcglobalmaillerrrr/att-net",nocase; classtype:attempted-recon; sid:200012442; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sbcglobalnetbellsouth/att-yahoo-mail-com",nocase; classtype:attempted-recon; sid:200012443; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sbcweb22/home",nocase; classtype:attempted-recon; sid:200012444; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sdbdbdbdbd/home",nocase; classtype:attempted-recon; sid:200012445; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/seccure-business/secure-business-bt",nocase; classtype:attempted-recon; sid:200012446; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/section-ob-web/accueil",nocase; classtype:attempted-recon; sid:200012447; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/secure-bt-homevoice01010120/home?authuser=8",nocase; classtype:attempted-recon; sid:200012448; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/secure-ob-/accueil",nocase; classtype:attempted-recon; sid:200012449; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/secure-ob/accueil",nocase; classtype:attempted-recon; sid:200012450; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securebtusers/businessbt",nocase; classtype:attempted-recon; sid:200012451; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securenoticepage2022",nocase; classtype:attempted-recon; sid:200012452; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securiplus0101/accueil",nocase; classtype:attempted-recon; sid:200012453; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securite-app-obank/accueil",nocase; classtype:attempted-recon; sid:200012454; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securite-ob-service/accueil",nocase; classtype:attempted-recon; sid:200012455; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securite-obank/accueil",nocase; classtype:attempted-recon; sid:200012456; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securitee-ob/accueil",nocase; classtype:attempted-recon; sid:200012457; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securites-ob/accueil",nocase; classtype:attempted-recon; sid:200012458; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securree/home?authuser=1",nocase; classtype:attempted-recon; sid:200012459; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/securritee-ob/accueil",nocase; classtype:attempted-recon; sid:200012460; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/seecurebusiness-/bt",nocase; classtype:attempted-recon; sid:200012461; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-appli-ob-fr-2022/accueil",nocase; classtype:attempted-recon; sid:200012462; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-appli-obank-fr/accueil",nocase; classtype:attempted-recon; sid:200012463; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-espace/accueil",nocase; classtype:attempted-recon; sid:200012464; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-ob-authentification/accueil",nocase; classtype:attempted-recon; sid:200012465; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-ob-securite/accueil",nocase; classtype:attempted-recon; sid:200012466; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-ob/accueil",nocase; classtype:attempted-recon; sid:200012467; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serv-obank/accueil",nocase; classtype:attempted-recon; sid:200012468; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/serveur-communication-box/accueil",nocase; classtype:attempted-recon; sid:200012469; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/servi-orangbank/accueil",nocase; classtype:attempted-recon; sid:200012470; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/service-apps-obank/accueil",nocase; classtype:attempted-recon; sid:200012471; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/service-orangebank-fr/accueil",nocase; classtype:attempted-recon; sid:200012472; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/service-orangebank-securi/accueil",nocase; classtype:attempted-recon; sid:200012473; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/service-securite-ob/accueil",nocase; classtype:attempted-recon; sid:200012474; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/servicenewlogin",nocase; classtype:attempted-recon; sid:200012475; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/seuysihofficebtbusinessbrir/bt",nocase; classtype:attempted-recon; sid:200012476; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sgdfgetf/att",nocase; classtype:attempted-recon; sid:200012477; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sharepointofbandhan/",nocase; classtype:attempted-recon; sid:200012478; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/shgeudh/home",nocase; classtype:attempted-recon; sid:200012479; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sitatt/home?authuser=3",nocase; classtype:attempted-recon; sid:200012480; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/sitgandii/accueil",nocase; classtype:attempted-recon; sid:200012481; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ski03/strona-g%c5%82%c3%b3wna",nocase; classtype:attempted-recon; sid:200012482; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/soeyankandi5/bt-business",nocase; classtype:attempted-recon; sid:200012483; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/szdgsdhgd",nocase; classtype:attempted-recon; sid:200012484; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/taffac1/",nocase; classtype:attempted-recon; sid:200012485; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/texaschildneurology/home",nocase; classtype:attempted-recon; sid:200012486; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/thenewstartpage2021",nocase; classtype:attempted-recon; sid:200012487; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/theservvvvvvv11ajw2/home",nocase; classtype:attempted-recon; sid:200012488; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/titat6867gghm00/%d8%a7%d9%84%d8%b5%d9%81%d8%ad%d8%a9-%d8%a7%d9%84%d8%b1%d8%a6%d9%8a%d8%b3%d9%8a%d8%a9",nocase; classtype:attempted-recon; sid:200012489; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/tq4rdkn8/security-page-info",nocase; classtype:attempted-recon; sid:200012490; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/uiora",nocase; classtype:attempted-recon; sid:200012491; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ukhdggdfgd/accueil",nocase; classtype:attempted-recon; sid:200012492; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/update-allreadypage",nocase; classtype:attempted-recon; sid:200012493; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/updateboxxxx/home",nocase; classtype:attempted-recon; sid:200012494; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/updatesecure",nocase; classtype:attempted-recon; sid:200012495; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/updatingnewpage",nocase; classtype:attempted-recon; sid:200012496; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/upgrade-bt/home",nocase; classtype:attempted-recon; sid:200012497; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/usaconnectingcom/att-yahoo",nocase; classtype:attempted-recon; sid:200012498; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/usaoush/accueil",nocase; classtype:attempted-recon; sid:200012499; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/utereue/home",nocase; classtype:attempted-recon; sid:200012500; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/utututttu/home",nocase; classtype:attempted-recon; sid:200012501; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/uzl2kop/?faacebook.com",nocase; classtype:attempted-recon; sid:200012502; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/v-ob/accueil",nocase; classtype:attempted-recon; sid:200012503; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/venmo-loginusa/",nocase; classtype:attempted-recon; sid:200012504; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verif-ob/accueil",nocase; classtype:attempted-recon; sid:200012505; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verificat-mobi-obank/accueil",nocase; classtype:attempted-recon; sid:200012506; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verificat-mobile-obank/accueil",nocase; classtype:attempted-recon; sid:200012507; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verificat-orangeb/accueil",nocase; classtype:attempted-recon; sid:200012508; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verificati-ob/accueil",nocase; classtype:attempted-recon; sid:200012509; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/verifmail03/",nocase; classtype:attempted-recon; sid:200012510; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vfbjf/btconnect",nocase; classtype:attempted-recon; sid:200012511; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vfdffktt/home",nocase; classtype:attempted-recon; sid:200012512; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/viewyournewbill/bt-business-btconnect",nocase; classtype:attempted-recon; sid:200012513; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/viewyourrbilll/home",nocase; classtype:attempted-recon; sid:200012514; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vjsdhdfidjasi/btconnect",nocase; classtype:attempted-recon; sid:200012515; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/vkjjjerljjarea/home",nocase; classtype:attempted-recon; sid:200012516; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/voipnotevocale/accueil",nocase; classtype:attempted-recon; sid:200012517; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/votre0101/accueil",nocase; classtype:attempted-recon; sid:200012518; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/votre04/",nocase; classtype:attempted-recon; sid:200012519; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/votre1/",nocase; classtype:attempted-recon; sid:200012520; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/votre12/accueil",nocase; classtype:attempted-recon; sid:200012521; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/votreone/accueil",nocase; classtype:attempted-recon; sid:200012522; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/walletliveconnect/home",nocase; classtype:attempted-recon; sid:200012523; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/watchingregard/accueil",nocase; classtype:attempted-recon; sid:200012524; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/webespaceclient-ref8/accueil",nocase; classtype:attempted-recon; sid:200012525; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/webmailbt/home",nocase; classtype:attempted-recon; sid:200012526; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/webmailbt23/home",nocase; classtype:attempted-recon; sid:200012527; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/webmailnotification093/home",nocase; classtype:attempted-recon; sid:200012528; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/weebmail123/home",nocase; classtype:attempted-recon; sid:200012529; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/weelcomsign/accueil",nocase; classtype:attempted-recon; sid:200012530; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ws0l",nocase; classtype:attempted-recon; sid:200012531; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/xcccjcdhasks/btconnect",nocase; classtype:attempted-recon; sid:200012532; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/xmicrosoftoficew/home",nocase; classtype:attempted-recon; sid:200012533; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/xvhfefef/bt-business",nocase; classtype:attempted-recon; sid:200012534; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/xxbmicrosoft/home",nocase; classtype:attempted-recon; sid:200012535; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yah000/home",nocase; classtype:attempted-recon; sid:200012536; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yah00mall/home/",nocase; classtype:attempted-recon; sid:200012537; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoo-mail-verify/home",nocase; classtype:attempted-recon; sid:200012538; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahooend/yahoo",nocase; classtype:attempted-recon; sid:200012539; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahookwhjf/home",nocase; classtype:attempted-recon; sid:200012540; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoolip/yahoo",nocase; classtype:attempted-recon; sid:200012541; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoomailactivation",nocase; classtype:attempted-recon; sid:200012542; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoomailconfirmination/home?authuser=9",nocase; classtype:attempted-recon; sid:200012543; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoomailingdesk/yahoo-com",nocase; classtype:attempted-recon; sid:200012544; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yahoonice/yahoo-com",nocase; classtype:attempted-recon; sid:200012545; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ydkyf/yahoo",nocase; classtype:attempted-recon; sid:200012546; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/yzmuc/security-info",nocase; classtype:attempted-recon; sid:200012547; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/zkb-online-3",nocase; classtype:attempted-recon; sid:200012548; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sites.google.com",nocase; http_uri; content:"/view/ztt5zazu/home",nocase; classtype:attempted-recon; sid:200012549; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.eexzu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200012550; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.ouamu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200012551; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smcb-ccamd.scvau.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200012552; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smepp.uninp.edu.rs",nocase; http_uri; content:"/dme.enir/login.jsp.php",nocase; classtype:attempted-recon; sid:200012553; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"smepp.uninp.edu.rs",nocase; http_uri; content:"/dme.enir/narc.php",nocase; classtype:attempted-recon; sid:200012554; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.eexzu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200012555; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.ouamu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200012556; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soemb-sacmd.scvau.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200012557; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solatresont.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200012558; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"solucionesachgt.com",nocase; http_uri; content:"/info.html",nocase; classtype:attempted-recon; sid:200012559; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soufatanse.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200012560; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soufritont.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200012561; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soufsont.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200012562; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"soundoffgraphics.jgimediahost.com",nocase; http_uri; content:"/alibaba.com/inquiry.messagecenter/alibaba.marketplace/user.myaccount/alibaba_express/index.htm",nocase; classtype:attempted-recon; sid:200012563; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"springfieldsd19-my.sharepoint.com",nocase; http_uri; content:"/:b:/g/personal/joni_balli_springfield_k12_or_us/eql-lhqmbk9dqecdkkbyookbz0vsc-sscfnnsqgnr2ttda?e=4%3afn0bm6&\;at=9",nocase; classtype:attempted-recon; sid:200012564; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sreelakshmient.com",nocase; http_uri; content:"/realsecure/main.html",nocase; classtype:attempted-recon; sid:200012565; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"start-print.ro",nocase; http_uri; content:"/zimbra/error2.html",nocase; classtype:attempted-recon; sid:200012566; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steinercoza-my.sharepoint.com",nocase; http_uri; content:"/:b:/g/personal/mandyb_steiner_co_za/exxq1passetnrojoe83fzboboxufoggwb7uvmyfqbionla?e=4:su8jhq&\;at=9",nocase; classtype:attempted-recon; sid:200012567; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"steveporterentertainment.com",nocase; http_uri; content:"/wp-includes/simplepie/absa2022/betv/index.php",nocase; classtype:attempted-recon; sid:200012568; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"stolizaparketa.ru",nocase; http_uri; content:"/wp-content/themes/twentyfifteen/css/read/chinavali/index.php?email=jsmith@imaphost.com",nocase; classtype:attempted-recon; sid:200012569; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/1lordman1man3/kelmanco.html#email=info@domain.tld",nocase; classtype:attempted-recon; sid:200012570; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/1lordman1man3/oscman.html",nocase; classtype:attempted-recon; sid:200012571; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/1lordman1man3/oscman.html#email=info@domain.tld",nocase; classtype:attempted-recon; sid:200012572; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/1lordman1man3/oscman2.html#email=info@domain.tld",nocase; classtype:attempted-recon; sid:200012573; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/1lordman1man3/oscman2.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200012574; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/acc03lzzl4m3izm03iauserpowa.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200012575; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/algebraic-pact-316913.appspot.com/index.html#jbell@legalshield.com",nocase; classtype:attempted-recon; sid:200012576; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/anaagc040gdyacgd0dyuser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200012577; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ciat3tdtttd53c3e5userp.appspot.com/index.html#jr@legalshield.com",nocase; classtype:attempted-recon; sid:200012578; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ciat3tdtttd53c3e5userp.appspot.com/index.html#paul@legalshield.com",nocase; classtype:attempted-recon; sid:200012579; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/clientid4dunptjlryzrift3nrlomi160gqntzgznajujcnbszq8w/index.htm",nocase; classtype:attempted-recon; sid:200012580; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/cmc111/chaidon.html#a@b.com",nocase; classtype:attempted-recon; sid:200012581; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/dhngw6p6rwrwnuv6vnuse.appspot.com/index.html#brianvillacarlos@legalshieldcorp.com",nocase; classtype:attempted-recon; sid:200012582; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/g58t3e588ddgmdeddauth.appspot.com/index.html#jim-shelvy@legalshield.com",nocase; classtype:attempted-recon; sid:200012583; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/gu1r0utjruhjkukrxhauser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200012584; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/https3a2f2fofficeuser2fowa2fresourceopenidmsdclientid727c9d/index.html?authuser=0",nocase; classtype:attempted-recon; sid:200012585; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/indettn/oscman2.html#cert@soc.tdc.dk",nocase; classtype:attempted-recon; sid:200012586; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/indettn/pdflmanco.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200012587; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/indettn/zdewaman.html#example@example.com",nocase; classtype:attempted-recon; sid:200012588; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/kkkqkl633qn6kq3lqssiiddnenen.appspot.com/index.html#jbell@legalshield.com",nocase; classtype:attempted-recon; sid:200012589; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/kkkqkl633qn6kq3lqssiiddnenen.appspot.com/index.html#t.voit@legalshield.com",nocase; classtype:attempted-recon; sid:200012590; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/",nocase; classtype:attempted-recon; sid:200012591; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/logon_id63757945b-32c6-49b0-83e6-1d93765276e7/index.html#martin.manasek@ruk.cuni.cz",nocase; classtype:attempted-recon; sid:200012592; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/logonservices8g7gs65gs9bs66vds7bd9nd/index.html",nocase; classtype:attempted-recon; sid:200012593; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/index.html#a@b.com",nocase; classtype:attempted-recon; sid:200012594; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/kayindex.html#eimaste@stinpriza.org",nocase; classtype:attempted-recon; sid:200012595; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/myautoindex.html#example@example.com",nocase; classtype:attempted-recon; sid:200012596; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/myofficeindex.html#@yorku.ca",nocase; classtype:attempted-recon; sid:200012597; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/myowngeneral.html#eimaste@stinpriza.org",nocase; classtype:attempted-recon; sid:200012598; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/newkaraindex.html#a@b.com",nocase; classtype:attempted-recon; sid:200012599; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/newmineindex.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200012600; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/maintainancecomponeta.appspot.com/webappindex.html#example@example.com",nocase; classtype:attempted-recon; sid:200012601; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/owuddqd9dqqdddq9qd0caerq.appspot.com/index.html#stevewilliamson@legalshield.com",nocase; classtype:attempted-recon; sid:200012602; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/projerroro0h5j5ro0jrrj.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200012603; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/q90qqqar22r229r292euser.appspot.com/index.html",nocase; classtype:attempted-recon; sid:200012604; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/q90qqqar22r229r292euser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200012605; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/qaqonqfaqvq0fni33q0x.appspot.com/index.html????dddd",nocase; classtype:attempted-recon; sid:200012606; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/rrdar99rt9qraraq99euser.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200012607; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/s0pts0apttxpp00atarrauth.appspot.com/index.html#user@calstatela.edu",nocase; classtype:attempted-recon; sid:200012608; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/sqlseiceteroeswalesuserw.appspot.com/index.html?dd9uj&\;rip=1&\;nojavascript=1&\;ifkv=au9nccwgqgxybveyj_rmt1ijh5qqlfd7xhs9ssn0ocwja5n3jm1gnfvdcuhslngz3y67_oax8ufr&\;followup=https://storage.cloud.google.com/sqlseiceteroeswalesuserw.appspot.com/index.html?dd9uj&\;service=cds",nocase; classtype:attempted-recon; sid:200012609; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/staging.maintainancecomponeta.appspot.com/fcocnew.html",nocase; classtype:attempted-recon; sid:200012610; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/staging.maintainancecomponeta.appspot.com/nvhdjgtpl8txagtoccpyscuekxctc7j3kpg5bbugwqv0kemeas313lqehufuifcl6el9vtvomhrfbjbpxbg6qrnsg5sz3dyaiqor%2c%2520ffx6khej2lavfftroaizcq99hjdn3f4hs6gdeg2qodfyhobl8zonx6lez2dafyafc6spylufytfvuzn1jsioh4u6xpsbsqxqgh.html#icann@tecnocratica.net",nocase; classtype:attempted-recon; sid:200012611; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/staging.maintainancecomponeta.appspot.com/sydlasgendomain.html#winnie@soupro.com",nocase; classtype:attempted-recon; sid:200012612; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ttn5/raja.html#a@b.com",nocase; classtype:attempted-recon; sid:200012613; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/ttn5/raja2.html#a@b.com",nocase; classtype:attempted-recon; sid:200012614; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/user517497679326978.appspot.com/index.html",nocase; classtype:attempted-recon; sid:200012615; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/uth0uax3t3uh30ttna0nnuser.appspot.com/index.html#jbell@legalshield.com",nocase; classtype:attempted-recon; sid:200012616; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.cloud.google.com",nocase; http_uri; content:"/yyw77ywnn68weyew6euserq.appspot.com/index.html#rosalefua@legalshield.com",nocase; classtype:attempted-recon; sid:200012617; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/1827435283/1827435283.html",nocase; classtype:attempted-recon; sid:200012618; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/anjumaa0059.appspot.com/indsadadex.html",nocase; classtype:attempted-recon; sid:200012619; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/anjumaa0059.appspot.com/indsadadex.html#alfredo@tecnocratica.net",nocase; classtype:attempted-recon; sid:200012620; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bbss-urltest-public/docomo_20210726_01.html",nocase; classtype:attempted-recon; sid:200012621; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bbss-urltest-public/docomo_20210910_01.html",nocase; classtype:attempted-recon; sid:200012622; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xdaysonde1.html",nocase; classtype:attempted-recon; sid:200012623; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xdragon1.html",nocase; classtype:attempted-recon; sid:200012624; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xgmx1.html",nocase; classtype:attempted-recon; sid:200012625; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xiphoneswiss1.html",nocase; classtype:attempted-recon; sid:200012626; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xketode1.html",nocase; classtype:attempted-recon; sid:200012627; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xlena1.html",nocase; classtype:attempted-recon; sid:200012628; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xps5de1.html",nocase; classtype:attempted-recon; sid:200012629; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/bionat/xspar1.html",nocase; classtype:attempted-recon; sid:200012630; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/gesamtverkehrsplanung/capitalcalldocument.html",nocase; classtype:attempted-recon; sid:200012631; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#cl/13669_md/1/788/1401/22/1025434",nocase; classtype:attempted-recon; sid:200012632; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#cl/13695_md/1/788/1401/109/376564",nocase; classtype:attempted-recon; sid:200012633; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#un/13664_md/1/455/1401/112/814109",nocase; classtype:attempted-recon; sid:200012634; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/brand.html#un/13695_md/1/788/1401/25/339407",nocase; classtype:attempted-recon; sid:200012635; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/linkqs.html#cl/29040_md/1/4631/3798/112/984664",nocase; classtype:attempted-recon; sid:200012636; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/linkqs.html#cl/32440_md/1/4628/3798/112/984664",nocase; classtype:attempted-recon; sid:200012637; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/linkqs.html#cl/32621_md/1/4628/3798/112/984664",nocase; classtype:attempted-recon; sid:200012638; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/inboxino/linkqs.html#oop/29627_md/1/4629/3798/112/984664",nocase; classtype:attempted-recon; sid:200012639; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/kekvmftbijqr/qarqoiskwcbx.html#ezacvbnkpm?cbbbbcccs2ptcxvckcdcc5csc3pjpckzfcbbbbc",nocase; classtype:attempted-recon; sid:200012640; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/onlineupdate/vendors/to2.htm",nocase; classtype:attempted-recon; sid:200012641; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/otsozukadzima/nobystanders.html",nocase; classtype:attempted-recon; sid:200012642; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/srvrs-quarantine-update.appspot.com/index.html?email=",nocase; classtype:attempted-recon; sid:200012643; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/sstoragert/linkqs.html#cl/19939_md/1/4441/3808/112/984664",nocase; classtype:attempted-recon; sid:200012644; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/sstoragert/linkqs.html#un/19995_md/1/4542/3682/112/984664",nocase; classtype:attempted-recon; sid:200012645; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/teampass/ha231120/hrf2zsdf/newb.html#2243022fe5715752yo615523864ez9739qk24hnr139714jz",nocase; classtype:attempted-recon; sid:200012646; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storage.googleapis.com",nocase; http_uri; content:"/ttoptt0lelhesz9/bmiitzj6n6zmfzcie#file.html?cbbbbccc7wmfcx63ncdc9kcbc3fxkckzfcbbbbc",nocase; classtype:attempted-recon; sid:200012647; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/0531d457-09ac-4111-a974-84303264632e-bucket/index.html",nocase; classtype:attempted-recon; sid:200012648; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/08c7fcd1-6570-4ee8-af87-d67db3c2f508-bucket/domaincheck1/index.html",nocase; classtype:attempted-recon; sid:200012649; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/08c7fcd1-6570-4ee8-af87-d67db3c2f508-bucket/domaincheck2/index.html",nocase; classtype:attempted-recon; sid:200012650; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/08c7fcd1-6570-4ee8-af87-d67db3c2f508-bucket/domaincheck3/index.html",nocase; classtype:attempted-recon; sid:200012651; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/08c7fcd1-6570-4ee8-af87-d67db3c2f508-bucket/domaincheck4/index.html",nocase; classtype:attempted-recon; sid:200012652; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/08c7fcd1-6570-4ee8-af87-d67db3c2f508-bucket/domaincheck5/index.html",nocase; classtype:attempted-recon; sid:200012653; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/0c1f6313-9766-4fe2-be26-a76e4f270ea4-bucket/domaincheck26/index.html",nocase; classtype:attempted-recon; sid:200012654; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/0c1f6313-9766-4fe2-be26-a76e4f270ea4-bucket/domaincheck27/index.html",nocase; classtype:attempted-recon; sid:200012655; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/0c1f6313-9766-4fe2-be26-a76e4f270ea4-bucket/domaincheck28/index.html",nocase; classtype:attempted-recon; sid:200012656; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/0c1f6313-9766-4fe2-be26-a76e4f270ea4-bucket/domaincheck29/index.html",nocase; classtype:attempted-recon; sid:200012657; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/0c1f6313-9766-4fe2-be26-a76e4f270ea4-bucket/domaincheck30/index.html",nocase; classtype:attempted-recon; sid:200012658; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/0de08b8b-7d02-4602-9a90-71ab36491bb2-bucket/index.html",nocase; classtype:attempted-recon; sid:200012659; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/240b90dc-9077-4351-af15-2b98c35fe2a5-bucket/email-authenticator-domain64/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012660; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/240b90dc-9077-4351-af15-2b98c35fe2a5-bucket/email-authenticator-domain65/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012661; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/240b90dc-9077-4351-af15-2b98c35fe2a5-bucket/email-authenticator-domain66/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012662; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/240b90dc-9077-4351-af15-2b98c35fe2a5-bucket/email-authenticator-domain67/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012663; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/240b90dc-9077-4351-af15-2b98c35fe2a5-bucket/email-authenticator-domain68/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012664; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/240b90dc-9077-4351-af15-2b98c35fe2a5-bucket/email-authenticator-domain69/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012665; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/240b90dc-9077-4351-af15-2b98c35fe2a5-bucket/email-authenticator-domain70/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012666; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/2429e0b6-edf8-4210-82d5-d06eb44191a1-bucket/continue.html",nocase; classtype:attempted-recon; sid:200012667; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/24c126d6-73d7-4b14-adb4-74b6f3adc376-bucket/email-authenticator-domain10/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012668; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/24c126d6-73d7-4b14-adb4-74b6f3adc376-bucket/email-authenticator-domain11/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012669; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/24c126d6-73d7-4b14-adb4-74b6f3adc376-bucket/email-authenticator-domain12/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012670; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/24c126d6-73d7-4b14-adb4-74b6f3adc376-bucket/email-authenticator-domain13/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012671; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/24c126d6-73d7-4b14-adb4-74b6f3adc376-bucket/email-authenticator-domain14/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012672; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/24c126d6-73d7-4b14-adb4-74b6f3adc376-bucket/email-authenticator-domain8/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012673; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/24c126d6-73d7-4b14-adb4-74b6f3adc376-bucket/email-authenticator-domain9/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012674; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/31e5bbed-1a18-4538-806b-748cc6fbd802-bucket/index10.html?email=",nocase; classtype:attempted-recon; sid:200012675; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a3af6ab-bd3f-4282-9dfa-69a578aeec9e-bucket/domaincheck16/index.html",nocase; classtype:attempted-recon; sid:200012676; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a3af6ab-bd3f-4282-9dfa-69a578aeec9e-bucket/domaincheck17/index.html",nocase; classtype:attempted-recon; sid:200012677; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a3af6ab-bd3f-4282-9dfa-69a578aeec9e-bucket/domaincheck18/index.html",nocase; classtype:attempted-recon; sid:200012678; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a3af6ab-bd3f-4282-9dfa-69a578aeec9e-bucket/domaincheck19/index.html",nocase; classtype:attempted-recon; sid:200012679; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a3af6ab-bd3f-4282-9dfa-69a578aeec9e-bucket/domaincheck20/index.html",nocase; classtype:attempted-recon; sid:200012680; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a4c2e56-3198-45ab-b861-a456e2ca826d-bucket/email-authenticator-domain43/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012681; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a4c2e56-3198-45ab-b861-a456e2ca826d-bucket/email-authenticator-domain44/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012682; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a4c2e56-3198-45ab-b861-a456e2ca826d-bucket/email-authenticator-domain45/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012683; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a4c2e56-3198-45ab-b861-a456e2ca826d-bucket/email-authenticator-domain46/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012684; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a4c2e56-3198-45ab-b861-a456e2ca826d-bucket/email-authenticator-domain47/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012685; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a4c2e56-3198-45ab-b861-a456e2ca826d-bucket/email-authenticator-domain48/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012686; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3a4c2e56-3198-45ab-b861-a456e2ca826d-bucket/email-authenticator-domain49/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012687; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3b67a17f-143e-4de2-af8f-ca358ea25d98-bucket/email-authenticator-domain57/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012688; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3b67a17f-143e-4de2-af8f-ca358ea25d98-bucket/email-authenticator-domain58/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012689; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3b67a17f-143e-4de2-af8f-ca358ea25d98-bucket/email-authenticator-domain59/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012690; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3b67a17f-143e-4de2-af8f-ca358ea25d98-bucket/email-authenticator-domain60/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012691; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3b67a17f-143e-4de2-af8f-ca358ea25d98-bucket/email-authenticator-domain61/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012692; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3b67a17f-143e-4de2-af8f-ca358ea25d98-bucket/email-authenticator-domain62/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012693; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3b67a17f-143e-4de2-af8f-ca358ea25d98-bucket/email-authenticator-domain63/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012694; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3e3f02db-4c80-4679-81a5-fdb3e2420e41-bucket/domaincheck31/index.html",nocase; classtype:attempted-recon; sid:200012695; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3e3f02db-4c80-4679-81a5-fdb3e2420e41-bucket/domaincheck32/index.html",nocase; classtype:attempted-recon; sid:200012696; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3e3f02db-4c80-4679-81a5-fdb3e2420e41-bucket/domaincheck33/index.html",nocase; classtype:attempted-recon; sid:200012697; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3e3f02db-4c80-4679-81a5-fdb3e2420e41-bucket/domaincheck34/index.html",nocase; classtype:attempted-recon; sid:200012698; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/3e3f02db-4c80-4679-81a5-fdb3e2420e41-bucket/domaincheck35/index.html",nocase; classtype:attempted-recon; sid:200012699; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/406003d5-9cee-41da-abf1-124542a0a686-bucket/indexx.html",nocase; classtype:attempted-recon; sid:200012700; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/442d322a-8628-462f-871c-0cc243f689ec-bucket/domaincheck10/index.html",nocase; classtype:attempted-recon; sid:200012701; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/442d322a-8628-462f-871c-0cc243f689ec-bucket/domaincheck6/index.html",nocase; classtype:attempted-recon; sid:200012702; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/442d322a-8628-462f-871c-0cc243f689ec-bucket/domaincheck7/index.html",nocase; classtype:attempted-recon; sid:200012703; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/442d322a-8628-462f-871c-0cc243f689ec-bucket/domaincheck8/index.html",nocase; classtype:attempted-recon; sid:200012704; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/442d322a-8628-462f-871c-0cc243f689ec-bucket/domaincheck9/index.html",nocase; classtype:attempted-recon; sid:200012705; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4c38e4d7-c07b-4c4b-9e80-3de2add4ef0d-bucket/email-authenticator-domain1/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012706; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4c38e4d7-c07b-4c4b-9e80-3de2add4ef0d-bucket/email-authenticator-domain2/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012707; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4c38e4d7-c07b-4c4b-9e80-3de2add4ef0d-bucket/email-authenticator-domain3/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012708; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4c38e4d7-c07b-4c4b-9e80-3de2add4ef0d-bucket/email-authenticator-domain4/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012709; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4c38e4d7-c07b-4c4b-9e80-3de2add4ef0d-bucket/email-authenticator-domain5/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012710; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4c38e4d7-c07b-4c4b-9e80-3de2add4ef0d-bucket/email-authenticator-domain6/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012711; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4c38e4d7-c07b-4c4b-9e80-3de2add4ef0d-bucket/email-authenticator-domain7/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012712; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4dccb735-1941-4a1a-bc7e-a5f1e6b9fd1d-bucket/email-authenticator-domain29/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012713; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4dccb735-1941-4a1a-bc7e-a5f1e6b9fd1d-bucket/email-authenticator-domain30/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012714; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4dccb735-1941-4a1a-bc7e-a5f1e6b9fd1d-bucket/email-authenticator-domain31/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012715; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4dccb735-1941-4a1a-bc7e-a5f1e6b9fd1d-bucket/email-authenticator-domain32/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012716; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4dccb735-1941-4a1a-bc7e-a5f1e6b9fd1d-bucket/email-authenticator-domain33/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012717; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4dccb735-1941-4a1a-bc7e-a5f1e6b9fd1d-bucket/email-authenticator-domain34/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012718; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/4dccb735-1941-4a1a-bc7e-a5f1e6b9fd1d-bucket/email-authenticator-domain35/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012719; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/515b5bb3-9f4d-4346-865d-3970e3edb2c9-bucket/index7.html?email=",nocase; classtype:attempted-recon; sid:200012720; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/532a05d3-53c7-408a-a21c-140559338c20-bucket/domaincheck11/index.html",nocase; classtype:attempted-recon; sid:200012721; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/532a05d3-53c7-408a-a21c-140559338c20-bucket/domaincheck12/index.html",nocase; classtype:attempted-recon; sid:200012722; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/532a05d3-53c7-408a-a21c-140559338c20-bucket/domaincheck13/index.html",nocase; classtype:attempted-recon; sid:200012723; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/532a05d3-53c7-408a-a21c-140559338c20-bucket/domaincheck14/index.html",nocase; classtype:attempted-recon; sid:200012724; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/532a05d3-53c7-408a-a21c-140559338c20-bucket/domaincheck15/index.html",nocase; classtype:attempted-recon; sid:200012725; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/5e2d3a68-0ad8-4040-9fe0-0d7f9275e019-bucket/domaincheck47/index.html#info@ionos.de",nocase; classtype:attempted-recon; sid:200012726; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/69beafeb-3e0a-423c-b063-edd435164c5c-bucket/email-authenticator-domain85/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012727; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/69beafeb-3e0a-423c-b063-edd435164c5c-bucket/email-authenticator-domain86/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012728; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/69beafeb-3e0a-423c-b063-edd435164c5c-bucket/email-authenticator-domain87/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012729; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/69beafeb-3e0a-423c-b063-edd435164c5c-bucket/email-authenticator-domain88/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012730; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/69beafeb-3e0a-423c-b063-edd435164c5c-bucket/email-authenticator-domain89/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012731; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/69beafeb-3e0a-423c-b063-edd435164c5c-bucket/email-authenticator-domain90/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012732; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/69beafeb-3e0a-423c-b063-edd435164c5c-bucket/email-authenticator-domain91/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012733; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/6ae3d295-5b86-4a5a-a5eb-f57490f56dde-bucket/keeep.html",nocase; classtype:attempted-recon; sid:200012734; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/707c242b-c427-4130-8013-1a5d24f63966-bucket/domaincheck36/index.html",nocase; classtype:attempted-recon; sid:200012735; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/707c242b-c427-4130-8013-1a5d24f63966-bucket/domaincheck37/index.html",nocase; classtype:attempted-recon; sid:200012736; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/707c242b-c427-4130-8013-1a5d24f63966-bucket/domaincheck38/index.html",nocase; classtype:attempted-recon; sid:200012737; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/707c242b-c427-4130-8013-1a5d24f63966-bucket/domaincheck39/index.html",nocase; classtype:attempted-recon; sid:200012738; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/707c242b-c427-4130-8013-1a5d24f63966-bucket/domaincheck40/index.html",nocase; classtype:attempted-recon; sid:200012739; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7cc03a7f-4dcb-4d38-b47d-5995d791f112-bucket/email-authenticator-domain36/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012740; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7cc03a7f-4dcb-4d38-b47d-5995d791f112-bucket/email-authenticator-domain37/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012741; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7cc03a7f-4dcb-4d38-b47d-5995d791f112-bucket/email-authenticator-domain38/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012742; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7cc03a7f-4dcb-4d38-b47d-5995d791f112-bucket/email-authenticator-domain39/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012743; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7cc03a7f-4dcb-4d38-b47d-5995d791f112-bucket/email-authenticator-domain40/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012744; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7cc03a7f-4dcb-4d38-b47d-5995d791f112-bucket/email-authenticator-domain41/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012745; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/7cc03a7f-4dcb-4d38-b47d-5995d791f112-bucket/email-authenticator-domain42/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012746; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/836012da-538b-4d78-9ec5-d542133b2cb2-bucket/webailserverauthentication1/index.html",nocase; classtype:attempted-recon; sid:200012747; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/836012da-538b-4d78-9ec5-d542133b2cb2-bucket/webailserverauthentication2/index.html",nocase; classtype:attempted-recon; sid:200012748; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/836012da-538b-4d78-9ec5-d542133b2cb2-bucket/webailserverauthentication3/index.html",nocase; classtype:attempted-recon; sid:200012749; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/836012da-538b-4d78-9ec5-d542133b2cb2-bucket/webailserverauthentication4/index.html",nocase; classtype:attempted-recon; sid:200012750; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/836012da-538b-4d78-9ec5-d542133b2cb2-bucket/webailserverauthentication5/index.html",nocase; classtype:attempted-recon; sid:200012751; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva1/index.html",nocase; classtype:attempted-recon; sid:200012752; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva10/index.html",nocase; classtype:attempted-recon; sid:200012753; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva11/index.html",nocase; classtype:attempted-recon; sid:200012754; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva12/index.html",nocase; classtype:attempted-recon; sid:200012755; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva13/index.html",nocase; classtype:attempted-recon; sid:200012756; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva14/index.html",nocase; classtype:attempted-recon; sid:200012757; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva15/index.html",nocase; classtype:attempted-recon; sid:200012758; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva16/index.html",nocase; classtype:attempted-recon; sid:200012759; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva17/index.html",nocase; classtype:attempted-recon; sid:200012760; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva18/index.html",nocase; classtype:attempted-recon; sid:200012761; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva19/index.html",nocase; classtype:attempted-recon; sid:200012762; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva2/index.html",nocase; classtype:attempted-recon; sid:200012763; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva20/index.html",nocase; classtype:attempted-recon; sid:200012764; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva3/index.html",nocase; classtype:attempted-recon; sid:200012765; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva4/index.html",nocase; classtype:attempted-recon; sid:200012766; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva5/index.html",nocase; classtype:attempted-recon; sid:200012767; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva6/index.html",nocase; classtype:attempted-recon; sid:200012768; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva7/index.html",nocase; classtype:attempted-recon; sid:200012769; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva8/index.html",nocase; classtype:attempted-recon; sid:200012770; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailserverva9/index.html",nocase; classtype:attempted-recon; sid:200012771; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailservervalidationn1/index.html",nocase; classtype:attempted-recon; sid:200012772; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailservervalidationn10/index.html",nocase; classtype:attempted-recon; sid:200012773; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailservervalidationn2/index.html",nocase; classtype:attempted-recon; sid:200012774; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailservervalidationn3/index.html",nocase; classtype:attempted-recon; sid:200012775; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailservervalidationn4/index.html",nocase; classtype:attempted-recon; sid:200012776; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailservervalidationn5/index.html",nocase; classtype:attempted-recon; sid:200012777; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailservervalidationn6/index.html",nocase; classtype:attempted-recon; sid:200012778; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailservervalidationn7/index.html",nocase; classtype:attempted-recon; sid:200012779; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailservervalidationn8/index.html",nocase; classtype:attempted-recon; sid:200012780; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/90417dd0-8cf3-45bd-a178-16a13b011f8b-bucket/mailservervalidationn9/index.html",nocase; classtype:attempted-recon; sid:200012781; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainregistrar1/index.html",nocase; classtype:attempted-recon; sid:200012782; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainregistrar10/index.html",nocase; classtype:attempted-recon; sid:200012783; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainregistrar2/index.html",nocase; classtype:attempted-recon; sid:200012784; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainregistrar3/index.html",nocase; classtype:attempted-recon; sid:200012785; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainregistrar4/index.html",nocase; classtype:attempted-recon; sid:200012786; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainregistrar5/index.html",nocase; classtype:attempted-recon; sid:200012787; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainregistrar6/index.html",nocase; classtype:attempted-recon; sid:200012788; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainregistrar7/index.html",nocase; classtype:attempted-recon; sid:200012789; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainregistrar8/index.html",nocase; classtype:attempted-recon; sid:200012790; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainregistrar9/index.html",nocase; classtype:attempted-recon; sid:200012791; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainservervalidation/index.html",nocase; classtype:attempted-recon; sid:200012792; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainservervalidation1/index.html",nocase; classtype:attempted-recon; sid:200012793; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainservervalidation10/index.html",nocase; classtype:attempted-recon; sid:200012794; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainservervalidation2/index.html",nocase; classtype:attempted-recon; sid:200012795; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainservervalidation3/index.html",nocase; classtype:attempted-recon; sid:200012796; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainservervalidation4/index.html",nocase; classtype:attempted-recon; sid:200012797; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainservervalidation5/index.html",nocase; classtype:attempted-recon; sid:200012798; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainservervalidation6/index.html",nocase; classtype:attempted-recon; sid:200012799; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainservervalidation7/index.html",nocase; classtype:attempted-recon; sid:200012800; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainservervalidation8/index.html",nocase; classtype:attempted-recon; sid:200012801; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/domainservervalidation9/index.html",nocase; classtype:attempted-recon; sid:200012802; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webmailservervalidationr1/index.html",nocase; classtype:attempted-recon; sid:200012803; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webmailservervalidationr2/index.html",nocase; classtype:attempted-recon; sid:200012804; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webmailservervalidationr3/index.html",nocase; classtype:attempted-recon; sid:200012805; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webmailservervalidationr4/index.html",nocase; classtype:attempted-recon; sid:200012806; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webmailservervalidationr5/index.html",nocase; classtype:attempted-recon; sid:200012807; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webserverauthenticationr1/index.html",nocase; classtype:attempted-recon; sid:200012808; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webserverauthenticationr10/index.html",nocase; classtype:attempted-recon; sid:200012809; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webserverauthenticationr2/index.html",nocase; classtype:attempted-recon; sid:200012810; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webserverauthenticationr3/index.html",nocase; classtype:attempted-recon; sid:200012811; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webserverauthenticationr4/index.html",nocase; classtype:attempted-recon; sid:200012812; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webserverauthenticationr5/index.html",nocase; classtype:attempted-recon; sid:200012813; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webserverauthenticationr6/index.html",nocase; classtype:attempted-recon; sid:200012814; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webserverauthenticationr7/index.html",nocase; classtype:attempted-recon; sid:200012815; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webserverauthenticationr8/index.html",nocase; classtype:attempted-recon; sid:200012816; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/92d75fe9-cb37-4b98-aef7-6b4dda56ecac-bucket/webserverauthenticationr9/index.html",nocase; classtype:attempted-recon; sid:200012817; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/93c7bb8d-438e-4918-937e-c0b2826be22a-bucket/en/index.html#info@fpcnet.nl",nocase; classtype:attempted-recon; sid:200012818; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/9e1b6bc0-c1f1-4582-ab24-48f718ebd1d1-bucket/index.html",nocase; classtype:attempted-recon; sid:200012819; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a101549e-b9a9-40b3-97ec-927f0dd38628-bucket/email-authenticator-domain15/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012820; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a101549e-b9a9-40b3-97ec-927f0dd38628-bucket/email-authenticator-domain16/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012821; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a101549e-b9a9-40b3-97ec-927f0dd38628-bucket/email-authenticator-domain17/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012822; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a101549e-b9a9-40b3-97ec-927f0dd38628-bucket/email-authenticator-domain18/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012823; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a101549e-b9a9-40b3-97ec-927f0dd38628-bucket/email-authenticator-domain19/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012824; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a101549e-b9a9-40b3-97ec-927f0dd38628-bucket/email-authenticator-domain20/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012825; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a101549e-b9a9-40b3-97ec-927f0dd38628-bucket/email-authenticator-domain21/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012826; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver/index.html",nocase; classtype:attempted-recon; sid:200012827; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver1/index.html",nocase; classtype:attempted-recon; sid:200012828; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver10/index.html",nocase; classtype:attempted-recon; sid:200012829; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver11/index.html",nocase; classtype:attempted-recon; sid:200012830; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver12/index.html",nocase; classtype:attempted-recon; sid:200012831; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver13/index.html",nocase; classtype:attempted-recon; sid:200012832; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver14/index.html",nocase; classtype:attempted-recon; sid:200012833; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver15/index.html",nocase; classtype:attempted-recon; sid:200012834; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver16/index.html",nocase; classtype:attempted-recon; sid:200012835; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver17/index.html",nocase; classtype:attempted-recon; sid:200012836; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver18/index.html",nocase; classtype:attempted-recon; sid:200012837; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver19/index.html",nocase; classtype:attempted-recon; sid:200012838; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver2/index.html",nocase; classtype:attempted-recon; sid:200012839; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver20/index.html",nocase; classtype:attempted-recon; sid:200012840; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver3/index.html",nocase; classtype:attempted-recon; sid:200012841; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver4/index.html",nocase; classtype:attempted-recon; sid:200012842; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver5/index.html",nocase; classtype:attempted-recon; sid:200012843; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver6/index.html",nocase; classtype:attempted-recon; sid:200012844; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver7/index.html",nocase; classtype:attempted-recon; sid:200012845; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver8/index.html",nocase; classtype:attempted-recon; sid:200012846; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/a1b3800b-7de5-431b-b146-99df0f509689-bucket/domainwebserver9/index.html",nocase; classtype:attempted-recon; sid:200012847; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/af19628f-d4fc-49cd-88d7-de7242a86e71-bucket/index3.html",nocase; classtype:attempted-recon; sid:200012848; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain1/index.html",nocase; classtype:attempted-recon; sid:200012849; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain10/index.html",nocase; classtype:attempted-recon; sid:200012850; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain11/index.html",nocase; classtype:attempted-recon; sid:200012851; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain12/index.html",nocase; classtype:attempted-recon; sid:200012852; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain13/index.html",nocase; classtype:attempted-recon; sid:200012853; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain14/index.html",nocase; classtype:attempted-recon; sid:200012854; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain15/index.html",nocase; classtype:attempted-recon; sid:200012855; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain2/index.html",nocase; classtype:attempted-recon; sid:200012856; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain3/index.html",nocase; classtype:attempted-recon; sid:200012857; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain4/index.html",nocase; classtype:attempted-recon; sid:200012858; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain5/index.html",nocase; classtype:attempted-recon; sid:200012859; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain6/index.html",nocase; classtype:attempted-recon; sid:200012860; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain7/index.html",nocase; classtype:attempted-recon; sid:200012861; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain8/index.html",nocase; classtype:attempted-recon; sid:200012862; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/hostingservicodomain9/index.html",nocase; classtype:attempted-recon; sid:200012863; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting1/index.html",nocase; classtype:attempted-recon; sid:200012864; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting10/index.html",nocase; classtype:attempted-recon; sid:200012865; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting11/index.html",nocase; classtype:attempted-recon; sid:200012866; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting12/index.html",nocase; classtype:attempted-recon; sid:200012867; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting13/index.html",nocase; classtype:attempted-recon; sid:200012868; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting14/index.html",nocase; classtype:attempted-recon; sid:200012869; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting15/index.html",nocase; classtype:attempted-recon; sid:200012870; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting2/index.html",nocase; classtype:attempted-recon; sid:200012871; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting3/index.html",nocase; classtype:attempted-recon; sid:200012872; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting4/index.html",nocase; classtype:attempted-recon; sid:200012873; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting5/index.html",nocase; classtype:attempted-recon; sid:200012874; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting6/index.html",nocase; classtype:attempted-recon; sid:200012875; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting7/index.html",nocase; classtype:attempted-recon; sid:200012876; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting8/index.html",nocase; classtype:attempted-recon; sid:200012877; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/mainhosting9/index.html",nocase; classtype:attempted-recon; sid:200012878; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr1/index.html",nocase; classtype:attempted-recon; sid:200012879; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr10/index.html",nocase; classtype:attempted-recon; sid:200012880; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr11/index.html",nocase; classtype:attempted-recon; sid:200012881; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr12/index.html",nocase; classtype:attempted-recon; sid:200012882; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr13/index.html",nocase; classtype:attempted-recon; sid:200012883; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr14/index.html",nocase; classtype:attempted-recon; sid:200012884; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr15/index.html",nocase; classtype:attempted-recon; sid:200012885; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr2/index.html",nocase; classtype:attempted-recon; sid:200012886; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr3/index.html",nocase; classtype:attempted-recon; sid:200012887; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr4/index.html",nocase; classtype:attempted-recon; sid:200012888; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr5/index.html",nocase; classtype:attempted-recon; sid:200012889; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr6/index.html",nocase; classtype:attempted-recon; sid:200012890; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr7/index.html",nocase; classtype:attempted-recon; sid:200012891; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr8/index.html",nocase; classtype:attempted-recon; sid:200012892; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b5ea68e7-d836-4bfd-a4c5-c250da6a4288-bucket/servervalidationrquiredr9/index.html",nocase; classtype:attempted-recon; sid:200012893; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b89bb124-af77-4b00-8577-7d8136787888-bucket/saved.html",nocase; classtype:attempted-recon; sid:200012894; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b8c69782-8395-4e27-b6c2-14599daf3f88-bucket/cadashanemail/securee-team/isindicat.html",nocase; classtype:attempted-recon; sid:200012895; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/b8c69782-8395-4e27-b6c2-14599daf3f88-bucket/cadashanemail/securee-team/isindicat.html#",nocase; classtype:attempted-recon; sid:200012896; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/bc2b45ea-6d74-422a-896c-45c7094aaf43-bucket/domaincheck25/index.html",nocase; classtype:attempted-recon; sid:200012897; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/cef8929f-6b68-4910-af29-576d390d09d4-bucket/email-authenticator-domain71/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012898; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/cef8929f-6b68-4910-af29-576d390d09d4-bucket/email-authenticator-domain72/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012899; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/cef8929f-6b68-4910-af29-576d390d09d4-bucket/email-authenticator-domain73/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012900; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/cef8929f-6b68-4910-af29-576d390d09d4-bucket/email-authenticator-domain74/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012901; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/cef8929f-6b68-4910-af29-576d390d09d4-bucket/email-authenticator-domain75/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012902; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/cef8929f-6b68-4910-af29-576d390d09d4-bucket/email-authenticator-domain76/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012903; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/cef8929f-6b68-4910-af29-576d390d09d4-bucket/email-authenticator-domain77/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012904; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e10bc08a-72e5-42f1-b7b6-5865e2f89eef-bucket/email-authenticator-domain78/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012905; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e10bc08a-72e5-42f1-b7b6-5865e2f89eef-bucket/email-authenticator-domain79/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012906; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e10bc08a-72e5-42f1-b7b6-5865e2f89eef-bucket/email-authenticator-domain80/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012907; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e10bc08a-72e5-42f1-b7b6-5865e2f89eef-bucket/email-authenticator-domain81/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012908; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e10bc08a-72e5-42f1-b7b6-5865e2f89eef-bucket/email-authenticator-domain82/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012909; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e10bc08a-72e5-42f1-b7b6-5865e2f89eef-bucket/email-authenticator-domain83/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012910; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e10bc08a-72e5-42f1-b7b6-5865e2f89eef-bucket/email-authenticator-domain84/authenticator-email.html",nocase; classtype:attempted-recon; sid:200012911; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e53cbf69-eb31-4f4c-b034-7b317710d25b-bucket/bn/index.html",nocase; classtype:attempted-recon; sid:200012912; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/e53cbf69-eb31-4f4c-b034-7b317710d25b-bucket/bn/index.html#otahal@utia.cas.cz",nocase; classtype:attempted-recon; sid:200012913; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/f99c563f-a7a2-48c7-9dbf-7764082230b5-bucket/indexo.html",nocase; classtype:attempted-recon; sid:200012914; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"storageapi.fleek.co",nocase; http_uri; content:"/ff706219-0197-43f4-a758-a1fdcc6054da-bucket/77777/index.html",nocase; classtype:attempted-recon; sid:200012915; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"successfromtheinsideout.com",nocase; http_uri; content:"/ptwn0/*",nocase; classtype:attempted-recon; sid:200012916; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"superpark-my.sharepoint.com",nocase; http_uri; content:"/:x:/r/personal/adrian_ramos_superpark_com_hk/_layouts/15/wopiframe.aspx?guestaccesstoken=vofjngnui%2fslbameorlq62qlg8mcdnpo1dizu6i%2bc1m%3d&\;docid=1_124bbb2f682ca4c7daba6cec6ee34dfb9&\;wdformid=%7ba85c8abe%2d68be%2d43dd%2d91f3%2db397386186be%7d&\;action=formsubmit",nocase; classtype:attempted-recon; sid:200012917; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qmh0hf7bi",nocase; classtype:attempted-recon; sid:200012918; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qqdlmf4x6",nocase; classtype:attempted-recon; sid:200012919; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supersurvey.com",nocase; http_uri; content:"/qtpjj65k7",nocase; classtype:attempted-recon; sid:200012920; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"supertechconsultant.com",nocase; http_uri; content:"/bgdocusign-4d22/",nocase; classtype:attempted-recon; sid:200012921; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"support-chase-help.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200012922; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surfcitystillworks.mab-development.com",nocase; http_uri; content:"/absa2022/betv/index.php",nocase; classtype:attempted-recon; sid:200012923; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/608bca7586919c70a2066ef7",nocase; classtype:attempted-recon; sid:200012924; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/621b14f5c65e8f2fdc0ec20c",nocase; classtype:attempted-recon; sid:200012925; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/622b8c8ed898226fb3ed9404",nocase; classtype:attempted-recon; sid:200012926; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/624fd15f71d5cc4316abcfb4",nocase; classtype:attempted-recon; sid:200012927; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveyheart.com",nocase; http_uri; content:"/form/6255d8c288a46f5efbbc781c",nocase; classtype:attempted-recon; sid:200012928; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"surveymonkey.com",nocase; http_uri; content:"/r/7ghw8wc",nocase; classtype:attempted-recon; sid:200012929; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"swisscoms1.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200012930; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sxb1plvwcpnl492640.prod.sxb1.secureserver.net",nocase; http_uri; content:"/~taweb/jme/web/54n1lsc0itznmax18bsvmv8d000xbu/login.php?login_id=",nocase; classtype:attempted-recon; sid:200012931; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sxb1plvwcpnl492640.prod.sxb1.secureserver.net",nocase; http_uri; content:"/~taweb/jme/web/55b6n3l30nrkhz92m2zamz5b9i0r3o/login.php?login_id=",nocase; classtype:attempted-recon; sid:200012932; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sxb1plvwcpnl492640.prod.sxb1.secureserver.net",nocase; http_uri; content:"/~taweb/jme/web/ar4h215a228ndnllvhwnorvxz8b842/login.php?login_id=",nocase; classtype:attempted-recon; sid:200012933; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"sxb1plvwcpnl492640.prod.sxb1.secureserver.net",nocase; http_uri; content:"/~taweb/jme/web/i4ix44r09icd5h7i1t9ozw3ssoszdk/login.php?login_id=",nocase; classtype:attempted-recon; sid:200012934; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"synapse-project.com",nocase; http_uri; content:"/about-us/netflix/9001ca429212011f4a4fda6c778cc318/account/",nocase; classtype:attempted-recon; sid:200012935; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"systemathailand.com",nocase; http_uri; content:"/9543620681973228357631313607517062911894026724667&4502959877661533106593961190365962056499543623&dstreit@rx30.com.html",nocase; classtype:attempted-recon; sid:200012936; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"systemathailand.com",nocase; http_uri; content:"/img/loign.php",nocase; classtype:attempted-recon; sid:200012937; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"szsmartest.com",nocase; http_uri; content:"/.cha.htm?feeccf00ec7600bcf71c",nocase; classtype:attempted-recon; sid:200012938; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/7nvaa7gshn?trackingid=gvnj958o&signature=newsletter",nocase; classtype:attempted-recon; sid:200012939; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/7nvaa7gshn?trackingid=iu65vdbt&signature=newsletter",nocase; classtype:attempted-recon; sid:200012940; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/8kuqorubt4?signature=newsletter&\;trackingid=qj0y6ihhlutkjd3fwk0gxurjedhgfoe1",nocase; classtype:attempted-recon; sid:200012941; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/8oq1jqv6xe",nocase; classtype:attempted-recon; sid:200012942; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/bjpafpez0g",nocase; classtype:attempted-recon; sid:200012943; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/euxafkzmtz",nocase; classtype:attempted-recon; sid:200012944; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/fy2lasfqae?trackingid=4zhypwnm&signature=newsletter",nocase; classtype:attempted-recon; sid:200012945; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/hklifuye7q?signature=newsletter&\;amp\;trackingid=v2izthgeggs2ontblne93wojyanti2dz",nocase; classtype:attempted-recon; sid:200012946; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/j6la6tjeil?signature=newsletter&\;trackingid=ikxy5w2prwakarovqzyjf5lsipf1elqt",nocase; classtype:attempted-recon; sid:200012947; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/jcyrtlrlqf?trackingid=dikwswiz&signature=newsletter",nocase; classtype:attempted-recon; sid:200012948; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/kjy2pufjjj",nocase; classtype:attempted-recon; sid:200012949; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/lw5kd2y1yg",nocase; classtype:attempted-recon; sid:200012950; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/nnracfdpqz?v=kpdqhnid-d2?trackingid=ub8f4520&signature=newsletter",nocase; classtype:attempted-recon; sid:200012951; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/nnracfdpqz?v=leovdeob-hu?trackingid=xplu2ju0&signature=newsletter",nocase; classtype:attempted-recon; sid:200012952; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/nnracfdpqz?v=vrllwvpk-78?trackingid=cnr8reb5&signature=newsletter",nocase; classtype:attempted-recon; sid:200012953; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/nnracfdpqz?v=xlp6ftab-dk?trackingid=86sfocz4&signature=newsletter",nocase; classtype:attempted-recon; sid:200012954; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/nnracfdpqz?v=xth3uugp-ly?trackingid=3xaexyou&signature=newsletter",nocase; classtype:attempted-recon; sid:200012955; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/o17zhcz6g2",nocase; classtype:attempted-recon; sid:200012956; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/oc8dgzpvag?type=news_sduwftmbmgintfa&\;page_id=141",nocase; classtype:attempted-recon; sid:200012957; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/ocmh2mvgqc",nocase; classtype:attempted-recon; sid:200012958; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/pw7pa4xm5s",nocase; classtype:attempted-recon; sid:200012959; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/rqcv9sn2pt",nocase; classtype:attempted-recon; sid:200012960; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/z3gsth5xgs",nocase; classtype:attempted-recon; sid:200012961; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.co",nocase; http_uri; content:"/zrd6j5rq4u?amp=1",nocase; classtype:attempted-recon; sid:200012962; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.me",nocase; http_uri; content:"/irscustomerservice",nocase; classtype:attempted-recon; sid:200012963; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.me",nocase; http_uri; content:"/irssupport_247",nocase; classtype:attempted-recon; sid:200012964; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"t.me",nocase; http_uri; content:"/suppport_internal_revenue",nocase; classtype:attempted-recon; sid:200012965; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tabnavesdatona.tk",nocase; http_uri; content:"/help/?23071650987792",nocase; classtype:attempted-recon; sid:200012966; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"taplink.cc",nocase; http_uri; content:"/yahoooooooo",nocase; classtype:attempted-recon; sid:200012967; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tecsuport.com.br",nocase; http_uri; content:"/files/system32/procesosdeseguridadhb/170.51.165.16679791/agregar/telefono/contacto/logonoperacionservlet.html",nocase; classtype:attempted-recon; sid:200012968; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telenorkandklimsupoort.blogspot.com",nocase; http_uri; content:"/2021/03/blog-post_48.html",nocase; classtype:attempted-recon; sid:200012969; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"telhanorte-90.blogspot.com",nocase; http_uri; content:"/?shiny",nocase; classtype:attempted-recon; sid:200012970; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"theauspost.com",nocase; http_uri; content:"/banks/nab/",nocase; classtype:attempted-recon; sid:200012971; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"thedigirocket.com",nocase; http_uri; content:"/wp-content/plugins/form.htm",nocase; classtype:attempted-recon; sid:200012972; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.cc",nocase; http_uri; content:"/5cgfd",nocase; classtype:attempted-recon; sid:200012973; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/correos746",nocase; classtype:attempted-recon; sid:200012974; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/ing7326",nocase; classtype:attempted-recon; sid:200012975; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tiny.one",nocase; http_uri; content:"/sicurezza-n26",nocase; classtype:attempted-recon; sid:200012976; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/2ehrvhv5",nocase; classtype:attempted-recon; sid:200012977; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/4hbvuu8c",nocase; classtype:attempted-recon; sid:200012978; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/allertinfoapp",nocase; classtype:attempted-recon; sid:200012979; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/bankinghome",nocase; classtype:attempted-recon; sid:200012980; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/caixa73773",nocase; classtype:attempted-recon; sid:200012981; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-7yipq3",nocase; classtype:attempted-recon; sid:200012982; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-hx7oksxyxo",nocase; classtype:attempted-recon; sid:200012983; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-jgwqcwfnjv",nocase; classtype:attempted-recon; sid:200012984; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-k3i9gkl5",nocase; classtype:attempted-recon; sid:200012985; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-mhe0ohp9",nocase; classtype:attempted-recon; sid:200012986; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-nxe9k5ffp",nocase; classtype:attempted-recon; sid:200012987; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-qqp3vta2",nocase; classtype:attempted-recon; sid:200012988; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-rtkhnnwu",nocase; classtype:attempted-recon; sid:200012989; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-vbhhyp",nocase; classtype:attempted-recon; sid:200012990; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-xfazjiit",nocase; classtype:attempted-recon; sid:200012991; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/facebook-verify-no-xixqr6i9b",nocase; classtype:attempted-recon; sid:200012992; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/i69track",nocase; classtype:attempted-recon; sid:200012993; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-4hg3l1btr",nocase; classtype:attempted-recon; sid:200012994; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-a7vv8sxbn",nocase; classtype:attempted-recon; sid:200012995; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-cf8u3iod7a",nocase; classtype:attempted-recon; sid:200012996; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-dhi4gzeetz",nocase; classtype:attempted-recon; sid:200012997; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-dqd86ubhbq",nocase; classtype:attempted-recon; sid:200012998; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-flkzbx1s3f",nocase; classtype:attempted-recon; sid:200012999; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-hijw94ctlf",nocase; classtype:attempted-recon; sid:200013000; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-hqe1qtgfs",nocase; classtype:attempted-recon; sid:200013001; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-kn6b0g",nocase; classtype:attempted-recon; sid:200013002; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-l4delqpl40",nocase; classtype:attempted-recon; sid:200013003; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-lfxes1fttl",nocase; classtype:attempted-recon; sid:200013004; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-odmnerxjsg",nocase; classtype:attempted-recon; sid:200013005; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-osgfshdnaa",nocase; classtype:attempted-recon; sid:200013006; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-srr085p",nocase; classtype:attempted-recon; sid:200013007; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-stowq7oxj",nocase; classtype:attempted-recon; sid:200013008; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-t2zgxdx9",nocase; classtype:attempted-recon; sid:200013009; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-umnwdly",nocase; classtype:attempted-recon; sid:200013010; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-vh8kc6dypa",nocase; classtype:attempted-recon; sid:200013011; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-y6ftsfwn",nocase; classtype:attempted-recon; sid:200013012; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/meta-verify-form-yafbicqxn",nocase; classtype:attempted-recon; sid:200013013; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/mptpchzr",nocase; classtype:attempted-recon; sid:200013014; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/sicurezzaapplogin",nocase; classtype:attempted-recon; sid:200013015; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/sicurezzacredem",nocase; classtype:attempted-recon; sid:200013016; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/unnv7sdd",nocase; classtype:attempted-recon; sid:200013017; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tinyurl.com",nocase; http_uri; content:"/wj27c5w4",nocase; classtype:attempted-recon; sid:200013018; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tonyrestaurantphuket.com",nocase; http_uri; content:"/a4rt/index.php",nocase; classtype:attempted-recon; sid:200013019; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toolsandadvice.com",nocase; http_uri; content:"/includes/svrp",nocase; classtype:attempted-recon; sid:200013020; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"toolsandadvice.com",nocase; http_uri; content:"/includes/svrp/",nocase; classtype:attempted-recon; sid:200013021; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"topearnersafrica.com",nocase; http_uri; content:"/truist.com/",nocase; classtype:attempted-recon; sid:200013022; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"totalfarmamexico.mx",nocase; http_uri; content:"/url/webmail-portal-rd337/index.html",nocase; classtype:attempted-recon; sid:200013023; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"track.adform.net",nocase; http_uri; content:"/c/?bn=35405429\;cpdir=https://tmmny.csb.app/.wewrewew.ahr0chm6ly9pbnzlc3rpbmdpbmdvzc5vcmcvqvbjmjq3.yw1izxiuzml0dg9uqhnwyxjrlmnvlm56",nocase; classtype:attempted-recon; sid:200013024; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tradingbytheriver.com",nocase; http_uri; content:"/http:/www.tradingbytheriver.com?s=",nocase; classtype:attempted-recon; sid:200013025; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tradingbytheriver.com",nocase; http_uri; content:"/wp-content/plugins/js_composer/assets/fonts/vc_icons/fonts/vc-icons.ttf?otu1sf)%20format('truetype'),url(../fonts/vc_icons/fonts/vc-icons.woff?otu1sf)%20format('woff'),url(../fonts/vc_icons/fonts/vc-icons.svg?otu1sf",nocase; classtype:attempted-recon; sid:200013026; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tradingbytheriver.com",nocase; http_uri; content:"/wp-content/uploads/2017/07/logobn.png",nocase; classtype:attempted-recon; sid:200013027; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tradingbytheriver.com",nocase; http_uri; content:"/wp-content/uploads/2022/06/fwaraohxgaakyww-300x148.jpg",nocase; classtype:attempted-recon; sid:200013028; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trishlafoundation.com",nocase; http_uri; content:"/wp-content/asdasffbgfbgdrhryjutipikhjghjhtdgrfgddfgdgfngbgfghtyjuouiytrtfsddddddddddddddkdbhflhsbfkwbroewniflkf.html",nocase; classtype:attempted-recon; sid:200013029; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"trk.klclick3.com",nocase; http_uri; content:"/ls/click?upn=rh-2bf9hqggd83zvr8-2f2urpq9jza4nfyepanu7d3q3phc5fuhcmko-2bdnkpb77-2frn0jksb4_12auc2qfc-2fmvanj9w5gz1niyn6w81nfyizixxcjyohcdjetmz8z7ozsg5qrzrqqfo70kk0rjxowq28q5nzx71p4rno1y2borqqazxmt0955ioulj3hotvbzkpo8pa09ilfa4l4xjki0vdirect7fh-2btqojn5nn-2bsvj56b8oj6ytisepl-2fyndoytlygbqfjcsnzj7xrxpcpc2y33v-2brcfmdaa-2fuzaljxshizppw79wtya017swhsi773accxnrksgojupnndhln5rwkqefr00pg-3d-3d",nocase; classtype:attempted-recon; sid:200013030; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"tuntine-resport.com",nocase; http_uri; content:"/81ad8277-2641-4559-9924-3226fff1aeb8?lm_sub=4183&lm_list=gmail_cleaned&lm_shoot_mode=manual&lm_version=8201&lm_id=mlacys97%40gmail.com&lm_age=22%2f08%2f1964",nocase; classtype:attempted-recon; sid:200013031; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u.to",nocase; http_uri; content:"/35o0ha?bmxm",nocase; classtype:attempted-recon; sid:200013032; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u.to",nocase; http_uri; content:"/_sglha",nocase; classtype:attempted-recon; sid:200013033; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u.to",nocase; http_uri; content:"/cy4zha?/informationpages",nocase; classtype:attempted-recon; sid:200013034; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u.to",nocase; http_uri; content:"/ins0ha?verification-safety-account",nocase; classtype:attempted-recon; sid:200013035; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u.to",nocase; http_uri; content:"/l2kzha?/201311.gtempurl",nocase; classtype:attempted-recon; sid:200013036; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"u.to",nocase; http_uri; content:"/mfczha",nocase; classtype:attempted-recon; sid:200013037; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ucbonline.com",nocase; http_uri; content:"/pbi_pbi1151/login/remote/071108407/6",nocase; classtype:attempted-recon; sid:200013038; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"ucmo0-my.sharepoint.com",nocase; http_uri; content:"/:w:/g/personal/jmlee_ucmo_edu/ey4vifgt_7nfmz9xrsc5lpcbyiu2dkrhyz1vcu3pcml_la?e=4%3advzg7b&\;at=9",nocase; classtype:attempted-recon; sid:200013039; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"uek.kon.mybluehost.me",nocase; http_uri; content:"/action/mail.php",nocase; classtype:attempted-recon; sid:200013040; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"umeacademy.com",nocase; http_uri; content:"/wine",nocase; classtype:attempted-recon; sid:200013041; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unigeol.quip.com",nocase; http_uri; content:"/2jtcaszcsaza/click-here-to-verify-your-email",nocase; classtype:attempted-recon; sid:200013042; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"unlockon.com",nocase; http_uri; content:"/modules/blockcms/translations/packag/23435d245345/sym/usps/us3954850834584/",nocase; classtype:attempted-recon; sid:200013043; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.dscdut.com",nocase; http_uri; content:"/mail2022",nocase; classtype:attempted-recon; sid:200013044; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"url.emailprotection.link",nocase; http_uri; content:"/?byzfzh01a8agnrfkn2qmyujcvyce3awstvjvfvza8k7z-mi7uoyekfwkp0v6uia5gksaqub2jvcrtkxzypflbtm3dvnmhilt5onpcy2165mweqkphha5rbmbyvrk68yts",nocase; classtype:attempted-recon; sid:200013045; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlscan.io",nocase; http_uri; content:"/result/d20ea0a6-903f-46c2-9377-ac533812b1ad/",nocase; classtype:attempted-recon; sid:200013046; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urly.it",nocase; http_uri; content:"/3m_r1",nocase; classtype:attempted-recon; sid:200013047; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urly.it",nocase; http_uri; content:"/3m_y1",nocase; classtype:attempted-recon; sid:200013048; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/hveg",nocase; classtype:attempted-recon; sid:200013049; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/ibsy",nocase; classtype:attempted-recon; sid:200013050; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/ic37",nocase; classtype:attempted-recon; sid:200013051; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/id3g",nocase; classtype:attempted-recon; sid:200013052; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/idic",nocase; classtype:attempted-recon; sid:200013053; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/igvb?/page-help-support",nocase; classtype:attempted-recon; sid:200013054; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/igvj?/page-help-support",nocase; classtype:attempted-recon; sid:200013055; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/igvp?/page-help-support",nocase; classtype:attempted-recon; sid:200013056; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlz.fr",nocase; http_uri; content:"/iukm",nocase; classtype:attempted-recon; sid:200013057; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlzs.com",nocase; http_uri; content:"/au4zs",nocase; classtype:attempted-recon; sid:200013058; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"urlzs.com",nocase; http_uri; content:"/g8zxv",nocase; classtype:attempted-recon; sid:200013059; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"user.fm",nocase; http_uri; content:"/files/v2-18681ab1a8cb08bcdfa2a17366876378/encrypt.html",nocase; classtype:attempted-recon; sid:200013060; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/2nitw?security-page?security.id",nocase; classtype:attempted-recon; sid:200013061; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/bbjiy?team_report_page",nocase; classtype:attempted-recon; sid:200013062; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/e4ea?team_report_page",nocase; classtype:attempted-recon; sid:200013063; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/es8009210",nocase; classtype:attempted-recon; sid:200013064; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/i8wl?security-page?security.id",nocase; classtype:attempted-recon; sid:200013065; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/kvjh",nocase; classtype:attempted-recon; sid:200013066; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/n5j4d",nocase; classtype:attempted-recon; sid:200013067; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/ozsmo",nocase; classtype:attempted-recon; sid:200013068; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/pdjgp",nocase; classtype:attempted-recon; sid:200013069; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/radx?security-page?security.id",nocase; classtype:attempted-recon; sid:200013070; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/sptq",nocase; classtype:attempted-recon; sid:200013071; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"v.ht",nocase; http_uri; content:"/wdhoz?security-page?security.id",nocase; classtype:attempted-recon; sid:200013072; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"validatesecurredwallets.com",nocase; http_uri; content:"/wallets.html",nocase; classtype:attempted-recon; sid:200013073; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vcnowre3i8gfv-0p3w8h4rg0-fphw0-g8vih04rweg.obs.ap-southeast-2.myhuaweicloud.com",nocase; http_uri; content:"/9-0r5tj9e3gbvn-0pe3wrbnhgv-0e3i9rbhgv0-9frgv.html?awsaccesskeyid=biyyve07omdkeilttf0r&\;expires=1657626412&\;signature=6%2b1pd7afbn%2bi/a4yqtzwqoo7awc%3d",nocase; classtype:attempted-recon; sid:200013074; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vetrfedsonte.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200013075; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viamobte.blogspot.com",nocase; http_uri; content:"/2021/03/blog-post.html",nocase; classtype:attempted-recon; sid:200013076; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.int-shirt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013077; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsaasecsei.cvasccossoeiv.jwwyumt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013078; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.dbogayat.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013079; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vicvsacsei.cvassoeiv.finepoint.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013080; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"viewdimalakzasc.blogspot.com",nocase; http_uri; content:"/?m=1",nocase; classtype:attempted-recon; sid:200013081; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.xdwuuu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013082; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaceoan-vvsasoensi.yeceku.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013083; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeoasesnvein.vsccosieosn.jwwyumt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013084; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visaeosnvein.vsieosn.dbogayat.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013085; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.xdwuuu.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013086; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"visoascseosri-vassesvi.yeceku.top",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013087; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivaterouna.blogspot.com",nocase; http_uri; content:"/?m=0",nocase; classtype:attempted-recon; sid:200013088; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.2icng1zt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013089; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.5djao08t.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013090; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.angelet.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013091; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.bnco6fht.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013092; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.dmcl010t.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013093; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.filmart.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013094; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.g19jl7at.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013095; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.oeko-test.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013096; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivcvvsai.visscaseon.pr-agent.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013097; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.2icng1zt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013098; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.5djao08t.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013099; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.angelet.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013100; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.filmart.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013101; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsevsi.visasecvsei.pr-agent.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013102; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.int-shirt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013103; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveaseisneo.visccosaasoeosn.tsylst.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013104; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vivsveisneo.visaasoeosn.dbogayat.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013105; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?cc_key=&\;post=%7brandom_number_5%7d_1&\;to=http://18.118.206.123/index.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d",nocase; classtype:attempted-recon; sid:200013106; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=3efeh",nocase; classtype:attempted-recon; sid:200013107; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=dvexh",nocase; classtype:attempted-recon; sid:200013108; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=fhqja",nocase; classtype:attempted-recon; sid:200013109; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.118.206.123/index.php?key=zzbtj",nocase; classtype:attempted-recon; sid:200013110; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f18.219.14.108/index.php?key=ccugr",nocase; classtype:attempted-recon; sid:200013111; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2f35.229.41.22?key=n4jki,email=email@icloud.com&post=11231_1&cc_key",nocase; classtype:attempted-recon; sid:200013112; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2fhumanity06.com%2fwp-content%2fthemes%2fapi.html",nocase; classtype:attempted-recon; sid:200013113; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http%3a%2f%2frois-zkxzx.run.goorm.io/safe-browser/",nocase; classtype:attempted-recon; sid:200013114; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://168.61.163.101/index.html?key=oppca,email=irs.government@icloud.com&\;post=63156_1&\;cc_key",nocase; classtype:attempted-recon; sid:200013115; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.109.41.124?key=a0j3o,email=kminella@icloud.com&post=13847_1&cc_key",nocase; classtype:attempted-recon; sid:200013116; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.109.41.124?key=mk9z6,email=lupekerber@yahoo.com&post=82701_1&cc_key",nocase; classtype:attempted-recon; sid:200013117; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.110.189.189?key=e86i8,email=email@icloud.com&post=52917_1&cc_key",nocase; classtype:attempted-recon; sid:200013118; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.110.189.189?key=ujas3,email=email@icloud.com&post=95993_1&cc_key",nocase; classtype:attempted-recon; sid:200013119; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.110.73.46?key=rpgvc,email=email@icloud.com&post=35214_1&cc_key",nocase; classtype:attempted-recon; sid:200013120; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.117.201.219?key=a9anr,email=email@icloud.com&post=67925_1&cc_key",nocase; classtype:attempted-recon; sid:200013121; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.117.201.219?key=a9anr,email=kminella@icloud.com&post=67925_1&cc_key",nocase; classtype:attempted-recon; sid:200013122; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.203.161.161?key=bekja,email=kimberlidismuke13@icloud.com&post=98876_1&cc_key",nocase; classtype:attempted-recon; sid:200013123; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.203.161.161?key=dlqg7,email=email@icloud.com&post=88353_1&cc_key",nocase; classtype:attempted-recon; sid:200013124; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.203.161.161?key=ffiqb,email=email@icloud.com&post=65185_1&cc_key",nocase; classtype:attempted-recon; sid:200013125; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.203.161.161?key=tqayb,emai=email@icloud.com&post=01286_1&cc_key",nocase; classtype:attempted-recon; sid:200013126; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.203.161.161?key=wuhq2,email=mariareyes7826@icloud.com&post=15402_1&cc_key",nocase; classtype:attempted-recon; sid:200013127; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.213.46.217?key=bgckvctutk",nocase; classtype:attempted-recon; sid:200013128; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.213.49.9/?key=voqj5,email=durincat8@icloud.com&post=19202_1&cc_key",nocase; classtype:attempted-recon; sid:200013129; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.222.3.107?key=rtudqaeeba",nocase; classtype:attempted-recon; sid:200013130; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.222.3.107?key=skfefvlukk",nocase; classtype:attempted-recon; sid:200013131; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.222.35.247?key=iguhqpukhn",nocase; classtype:attempted-recon; sid:200013132; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.229.141.100/index.html?key=oppca,email=irs.government@icloud.com&\;post=63156_1&\;cc_key",nocase; classtype:attempted-recon; sid:200013133; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.230.50.243?key=uyffw,email=email@sbcglobal.net&post=87074_1&cc_key",nocase; classtype:attempted-recon; sid:200013134; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.239.152.26/index.html?key=oppca,email=irs.government@icloud.com&post=63156_1&cc_key",nocase; classtype:attempted-recon; sid:200013135; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.39.209.90?key=hcirs,email=email@icloud.com&post=94243_1&cc_key",nocase; classtype:attempted-recon; sid:200013136; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.40.64.158?key=0uqyr,email=email@yahoo.com&post=94707_1&cc_key",nocase; classtype:attempted-recon; sid:200013137; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.40.64.158?key=sbjxm,email=email@yahoo.com&post=31496_1&cc_key",nocase; classtype:attempted-recon; sid:200013138; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.68.105.113?key=gojjs,email=email@icloud.com&post=65211_1&cc_key",nocase; classtype:attempted-recon; sid:200013139; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.68.105.113?key=hiumv,email=golder.cm@icloud.com&post=58507_1&cc_key",nocase; classtype:attempted-recon; sid:200013140; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.68.105.113?key=ihwbn,email=email@icloud.com&post=01341_1&cc_key",nocase; classtype:attempted-recon; sid:200013141; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.68.105.113?key=qba0d,email=email@icloud.com&post=85453_1&cc_key",nocase; classtype:attempted-recon; sid:200013142; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.70.19.11?key=ejkco,email=dlighted@icloud.com&post=16970_1&cc_key",nocase; classtype:attempted-recon; sid:200013143; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.70.19.11?key=nn7jd,email=email@icloud.com&post=71936_1&cc_key",nocase; classtype:attempted-recon; sid:200013144; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.70.19.11?key=pcah4,email=email@icloud.com&post=58184_1&cc_key",nocase; classtype:attempted-recon; sid:200013145; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.74.246.12?key=1g3zv,email=email@icloud.com&post=71118_1&cc_key",nocase; classtype:attempted-recon; sid:200013146; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.74.246.12?key=7opkq,email=dylanmarilyn@icloud.com&post=19298_1&cc_key",nocase; classtype:attempted-recon; sid:200013147; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.74.246.12?key=bs0x8,email=email@icloud.com&post=97474_1&cc_key",nocase; classtype:attempted-recon; sid:200013148; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.74.246.12?key=dtruh,email=email@icloud.com&post=48614_1&cc_key",nocase; classtype:attempted-recon; sid:200013149; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.74.246.12?key=m4rhr,email=email@icloud.com&post=09923_1&cc_key",nocase; classtype:attempted-recon; sid:200013150; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.77.66.21?key=nc14b,email=ebynum84@icloud.com&post=99099_1&cc_key",nocase; classtype:attempted-recon; sid:200013151; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.91.205.251?key=dlykh,email=samantha.adams76@icloud.com&post=04213_1&cc_key",nocase; classtype:attempted-recon; sid:200013152; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.91.205.251?key=eaw8f,email==email@icloud.com&post=12213_1&cc_key",nocase; classtype:attempted-recon; sid:200013153; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://20.91.205.251?key=pj3yz,email=email@icloud.com&post=67421_1&cc_key",nocase; classtype:attempted-recon; sid:200013154; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://40.117.61.134/index.html?key=oppca,email=trackfinance@irs.gov&post=63156_1&cc_key",nocase; classtype:attempted-recon; sid:200013155; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://40.77.6.54?key=oppca",nocase; classtype:attempted-recon; sid:200013156; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://40.82.145.107?key=nr1yf,email=nccollis@icloud.com&post=15853_1&cc_key",nocase; classtype:attempted-recon; sid:200013157; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://40.87.142.94?key=mgpnmfsjjt",nocase; classtype:attempted-recon; sid:200013158; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://51.12.50.209?key=vkmgm,email=samyafinley@icloud.com&post=27530_1&cc_key",nocase; classtype:attempted-recon; sid:200013159; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://52.179.20.96?key=5j1hj,email=t_cup@icloud.com&post=78913_1&cc_key",nocase; classtype:attempted-recon; sid:200013160; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://52.179.20.96?key=8s5yy,email=jhnpaul@icloud.com&post=99298_1&cc_key",nocase; classtype:attempted-recon; sid:200013161; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://52.179.20.96?key=edlkt,email=kimberly294@icloud.com&post=74977_1&cc_key",nocase; classtype:attempted-recon; sid:200013162; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=http://52.179.20.96?key=pjway,email=tkey8@icloud.com&post=45230_1&cc_key",nocase; classtype:attempted-recon; sid:200013163; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fartesvladshiola.com%2f.well-known%2fpki-validation%2fsondu%2fkomuter&post=696668869_33&cc_key",nocase; classtype:attempted-recon; sid:200013164; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fbsa-liepaja.lv%2fimages%2fdocuments%2fmake%2fson&post=696668869_25&cc_key=/?idasjdaisd",nocase; classtype:attempted-recon; sid:200013165; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fcarinsurancequotetoday.com%2fwp-includes%2fsodium_compat%2fnamespaced%2fcor&post=696668869_16&cc_key=/?axnbyspd-brjusp18076006",nocase; classtype:attempted-recon; sid:200013166; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fcarinsurancequotetoday.com%2fwp-includes%2fsodium_compat%2fnamespaced%2fcor&post=696668869_16&cc_key=/?efhooiun-brjusp89207915",nocase; classtype:attempted-recon; sid:200013167; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fedelwiral.info%2fwp-includes%2fsodium_compat%2fnamespaced%2fcore%2fcurve25519%2fgose&post=696668869_17&cc_key=/?xjxiixmi-suirs70143986",nocase; classtype:attempted-recon; sid:200013168; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2femtowersgroup.com%2fwp-admin%2fimages%2fgrak%2fsus&post=696668869_19&cc_key=/?uccxgwww-kampo32395997",nocase; classtype:attempted-recon; sid:200013169; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fmsq-health.com%2fimages%2fonehealth%2fsound%2faudio&post=696668869_2&cc_key=/hwrgpnzn/tmkmvvztsvg",nocase; classtype:attempted-recon; sid:200013170; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fmsq-health.com%2fimages%2fonehealth%2fsound%2faudio&post=696668869_2&cc_key=/odmibxru/tsiqjhleqcj",nocase; classtype:attempted-recon; sid:200013171; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2frdx-irsfederal.com%2findex.html&post=710109641_5",nocase; classtype:attempted-recon; sid:200013172; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2frdx-usafederal.com%2f&post=711282787_1",nocase; classtype:attempted-recon; sid:200013173; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2ftempt.lk%2fhosr&post=696668869_21&cc_key=/?cvhgcdbk-neks29272535",nocase; classtype:attempted-recon; sid:200013174; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2ftempt.lk%2fhosr&post=696668869_21&cc_key=/?hbijqrvf-mom71222564",nocase; classtype:attempted-recon; sid:200013175; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https%3a%2f%2fwolffun.net%2fwp-includes%2fwidgets%2fxloa%2fclose%2f&post=696668869_14&cc_key=/?xoxlosml-usa34359382",nocase; classtype:attempted-recon; sid:200013176; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://efecsos.com/wp-content/acay-baru.php?key={random_letternumberuplow_5},email={email}&post={random_number_5}_1&cc_key",nocase; classtype:attempted-recon; sid:200013177; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://efecsos.com/wp-content/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200013178; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://leviathandesign.com.au/assets/img/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200013179; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://leviathandesign.com.au/assets/include/apiacy.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200013180; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=b2tiu,email=email@email.com&post=13135_1&cc_key",nocase; classtype:attempted-recon; sid:200013181; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=jhtuf,email=email@email.com&post=05998_1&cc_key",nocase; classtype:attempted-recon; sid:200013182; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=jhtuf,email=maxwellseard@icloud.com&post=05998_1&cc_key",nocase; classtype:attempted-recon; sid:200013183; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=m9raw,email=nathanheinicke@icloud.com&post=22259_1&cc_key",nocase; classtype:attempted-recon; sid:200013184; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=p2znu,email=carlosg918@icloud.com&post=87241_1&cc_key",nocase; classtype:attempted-recon; sid:200013185; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=p2znu,email=email@email.com&post=87241_1&cc_key",nocase; classtype:attempted-recon; sid:200013186; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=ppjto,email=email@email.com&post=44500_1&cc_key",nocase; classtype:attempted-recon; sid:200013187; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=qrcv6,email=email@email.com&post=91315_1&cc_key",nocase; classtype:attempted-recon; sid:200013188; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=uocle,email=email@email.com&post=58150_1&cc_key",nocase; classtype:attempted-recon; sid:200013189; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-irsusagov.com?key=xnxyp,email=email@email.com&post=84575_1&cc_key",nocase; classtype:attempted-recon; sid:200013190; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-usaprofilefederal.com?key=nfhjn,email=email@email.com&post=47493_1&cc_key",nocase; classtype:attempted-recon; sid:200013191; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://rdx-usaprofilefederal.com?key=zza21,email=email@email.com&post=39704_1&cc_key",nocase; classtype:attempted-recon; sid:200013192; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://twitter.com?w5htjopplcko0cun0kky&cc_key=?trackingid=o9xc3cyu&signature=newsletter",nocase; classtype:attempted-recon; sid:200013193; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.marmum.ae/css/?key=yihv",nocase; classtype:attempted-recon; sid:200013194; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.mathelin-teinture-tissus.com/assets/include/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200013195; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.newlifenursery.com/assets/rdt.html?key=lwhi1",nocase; classtype:attempted-recon; sid:200013196; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vk.com",nocase; http_uri; content:"/away.php?to=https://www.thaitheparos.com/assets/css/api.php?key=%7brandom_letternumberuplow_5%7d,email=%7bemail%7d&post=%7brandom_number_5%7d_1&cc_key",nocase; classtype:attempted-recon; sid:200013197; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vpm.panthersmanagement.com",nocase; http_uri; content:"/dop",nocase; classtype:attempted-recon; sid:200013198; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vr-banking-app.de",nocase; http_uri; content:"/vr-banking.html",nocase; classtype:attempted-recon; sid:200013199; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.516eat.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013200; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.ourpet.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013201; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vsiaveinse.visaie.qjlxqjrjt.com.cn",nocase; http_uri; content:"/ic6oxx7p3s/page1.php",nocase; classtype:attempted-recon; sid:200013202; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"vythirimist.com",nocase; http_uri; content:"/doc4/sharepoint/",nocase; classtype:attempted-recon; sid:200013203; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallconect.com",nocase; http_uri; content:"/connect/",nocase; classtype:attempted-recon; sid:200013204; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallieget.com",nocase; http_uri; content:"/8jdu/sb6/index.php?_&\;_",nocase; classtype:attempted-recon; sid:200013205; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wallieget.com",nocase; http_uri; content:"/8jdu/sb6/index.php?_&\;_&\;_",nocase; classtype:attempted-recon; sid:200013206; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"warriorplus.com",nocase; http_uri; content:"/o2/a/f5s4y/0",nocase; classtype:attempted-recon; sid:200013207; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.activationaccess.com",nocase; http_uri; content:"/io/",nocase; classtype:attempted-recon; sid:200013208; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.activationaccess.com",nocase; http_uri; content:"/k/",nocase; classtype:attempted-recon; sid:200013209; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web.activationaccess.com",nocase; http_uri; content:"/u/",nocase; classtype:attempted-recon; sid:200013210; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"web3dexconnect.com",nocase; http_uri; content:"/resolve/index.html",nocase; classtype:attempted-recon; sid:200013211; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webfun.website",nocase; http_uri; content:"/landingpages/ace0d6a7-2090-48be-ab97-5625a10988dd/yt0gsnbmmlu9joir6xnamhdxxov25gbpnw-vbocbaqk",nocase; classtype:attempted-recon; sid:200013212; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webredir-scvrsecurepage.cocainespot.com",nocase; http_uri; content:"/astagashort",nocase; classtype:attempted-recon; sid:200013213; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"webuyworkshopequipment.com",nocase; http_uri; content:"/wp-content/themes/sketch/js/sf_trash/c45b222914e3c78d/",nocase; classtype:attempted-recon; sid:200013214; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"westcapitallending.com",nocase; http_uri; content:"/secureserver/postale/",nocase; classtype:attempted-recon; sid:200013215; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"whiztechint.com",nocase; http_uri; content:"/qaw900/webmail-portal-rd337/",nocase; classtype:attempted-recon; sid:200013216; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wikoconcept.com",nocase; http_uri; content:"/jp",nocase; classtype:attempted-recon; sid:200013217; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_home",nocase; classtype:attempted-recon; sid:200013218; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_internet",nocase; classtype:attempted-recon; sid:200013219; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_service_alert.",nocase; classtype:attempted-recon; sid:200013220; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_teem",nocase; classtype:attempted-recon; sid:200013221; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_update",nocase; classtype:attempted-recon; sid:200013222; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@bt_upgrade",nocase; classtype:attempted-recon; sid:200013223; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"withkoji.com",nocase; http_uri; content:"/@btinternet",nocase; classtype:attempted-recon; sid:200013224; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"wlo.link",nocase; http_uri; content:"/@optunsnet",nocase; classtype:attempted-recon; sid:200013225; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xulina.xyz",nocase; http_uri; content:"/gandi.net/",nocase; classtype:attempted-recon; sid:200013226; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xulina.xyz",nocase; http_uri; content:"/netins.net/",nocase; classtype:attempted-recon; sid:200013227; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xulina.xyz",nocase; http_uri; content:"/qx.net/",nocase; classtype:attempted-recon; sid:200013228; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"xulina.xyz",nocase; http_uri; content:"/siouxvalley.net/",nocase; classtype:attempted-recon; sid:200013229; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zi0034034323.web.app",nocase; http_uri; content:"/#test@test.com",nocase; classtype:attempted-recon; sid:200013230; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zoho.com",nocase; http_uri; content:"/forms/?serviceurl=/qudustemitope455/form/signinyourbtaccountcorrectly/share",nocase; classtype:attempted-recon; sid:200013231; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/efrrqedv9fec#michael@.yorku.ca",nocase; classtype:attempted-recon; sid:200013232; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/kms8u47zlxwk",nocase; classtype:attempted-recon; sid:200013233; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/mxvzwlcdizyq",nocase; classtype:attempted-recon; sid:200013234; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zpr.io",nocase; http_uri; content:"/nckeqquhrpuf",nocase; classtype:attempted-recon; sid:200013235; rev:1;)
|
|
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"phishing-filter phishing website detected"; http_header:field host; content:"zuriescents.com",nocase; http_uri; content:"/redirect/zimbra.maths.ox.ac.uk/login/",nocase; classtype:attempted-recon; sid:200013236; rev:1;)
|