AT related malicious URL (www .settlementdomain .com/5DLFML8/S5T8TN8/?__rpt=0&__po=17304&__ptid=6f70f5681ff84ca09100279f32029176&__rpa=1&__rc=1&sub1=&sub2=&sub3=&sub4=&sub5=&source_id=&__pcd=9) - Suricata Rule 6000003 (julioliraup/antiphishing)

AT related malicious URL (www .settlementdomain .com/5DLFML8/S5T8TN8/?rpt=0&po=17304&ptid=6f70f5681ff84ca09100279f32029176&rpa=1&__rc=1&sub1=&sub2=&sub3=&sub4=&sub5=&source_id=&__pcd=9)

SID: 6000003Rev: 1EnabledDerived1 viewsHistory

Fileantiphishing.rules

CreatedJuly 31, 2026

UpdatedAugust 15, 2026

Classificationsocial-engineering

alert http $HOME_NET any -> any any (msg:"AT related malicious URL (www .settlementdomain .com/5DLFML8/S5T8TN8/?__rpt=0&__po=17304&__ptid=6f70f5681ff84ca09100279f32029176&__rpa=1&__rc=1&sub1=&sub2=&sub3=&sub4=&sub5=&source_id=&__pcd=9)"; flow:established,to_server; http.uri; content:"/5DLFML8/S5T8TN8/?__rpt=0&__po=17304&__ptid=6f70f5681ff84ca09100279f32029176&__rpa=1&__rc=1&sub1=&sub2=&sub3=&sub4=&sub5=&source_id=&__pcd=9"; startswith; fast_pattern; http.host; content:"www.settlementdomain.com"; endswith; reference:url,phishstats.info; reference:url,julioliraup.github.io/AT/signature.html?sid=6000003; classtype:social-engineering; sid:6000003; rev:1; metadata:signature_severity Major, created_et 2026_07_30;)

References

url	phishstats.info
url	julioliraup.github.io/AT/signature.html?sid=6000003

AT related malicious URL (www .settlementdomain .com/5DLFML8/S5T8TN8/?rpt=0&po=17304&ptid=6f70f5681ff84ca09100279f32029176&rpa=1&__rc=1&sub1=&sub2=&sub3=&sub4=&sub5=&source_id=&__pcd=9)

References

Metadata

Comments (0)