AT DNS query to suspicious domain - Phishing

SID: 6000000Rev: 1EnabledDerived0 views
History
Fileantiphishing.rules
CreatedMay 22, 2026
UpdatedAugust 15, 2026
Classificationsocial-engineering
alert dns $HOME_NET any -> any any (msg:"AT DNS query to suspicious domain - Phishing"; dns.query; dataset:isset,phishing_domains,type string,load phishing.lst; reference:url,github.com/julioliraup/Antiphishing; reference:url,julioliraup.github.io/AT/signature.html?sid=6000000; classtype:social-engineering; sid:6000000; rev:1; metadata:signature_severity Major, created_et 2025_02_19;)

References

urlgithub.com/julioliraup/Antiphishing
urljulioliraup.github.io/AT/signature.html?sid=6000000

Metadata

signature severityMajor
created et2025_02_19

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!