Versions (3)
Version DetailsCurrent
Rev: 8 • Aug 21, 2023, 12:00 PM🐾 -⚠ DNS request to suspicious domain in french TLD 🇫🇷 - Listed by Red Flag Domains 🚩
alert dns any any -> any any (msg:"🐾 -⚠ DNS request to suspicious domain in french TLD 🇫🇷 - Listed by Red Flag Domains 🚩"; flow:to_server, stateless; dns_query; dataset:isset,pawpatrules_red_flag_domains,type string,load pawpatrules_red_flag_domains.lst; reference: url,https://red.flag.domains/; metadata:created_at 2023_08_21, updated_at 2025_03_04; sid:3300731; rev:8; classtype:bad-unknown;)
Aug 21, 2023, 12:00 PM
Mar 4, 2025, 12:00 PM
Feb 21, 2024, 4:00 PM
May 29, 2025, 11:12 PM
rules/PAW-PATRULES_PHISHING.rules