Back to Rule

Rule History

SID: 3321285 • Source: pawpatrules

Versions (2)

Version DetailsCurrent

Rev: 2Jun 23, 2024, 12:01 AM

🐾 -⚠ TLS connection to suspicious domain - Listed by PhishStats 🎣

alert tls any any -> any any (msg:"🐾 -⚠ TLS connection to suspicious domain - Listed by PhishStats 🎣"; flow:to_server, stateless; tls_sni; dataset:isset,pawpatrules_phishstats,type string,load pawpatrules_phishstats.lst; reference:url,https://phishstats.info/; metadata:created_at 2024_06_23, updated_at 2024_10_21; sid:3321285; rev:2; classtype:bad-unknown;)

Jun 23, 2024, 12:01 AM

Oct 21, 2024, 12:00 PM

Jun 23, 2024, 12:01 AM

May 29, 2025, 11:12 PM

rules/PAW-PATRULES_PHISHING.rules