AT related malicious URL (d30sec8k5ond2x.cloudfront.net/dp/B0FJQN788S/ref=mes-dp?_encoding=UTF8&pd_rd_w=8lftH&content-id=amzn1.sym.f45dea16-f25a-4516-b170-6b4033444233&pf_rd_p=f45dea16-f25a-4516-b170-6b4033444233&pf_rd_r=JZXV1E0QC1YTX1JDFV8G&pd_rd_wg=Qugrj&pd_rd_r=0923ad4b-c831-41d0-8b1d-37c98037a630)

SID: 6012512Rev: 1EnabledDerived6 viewsHistory

Fileantiphishing.rules

CreatedAugust 22, 2026

UpdatedAugust 22, 2026

Classificationsocial-engineering

alert http $HOME_NET any -> any any (msg:"AT related malicious URL (d30sec8k5ond2x.cloudfront.net/dp/B0FJQN788S/ref=mes-dp?_encoding=UTF8&pd_rd_w=8lftH&content-id=amzn1.sym.f45dea16-f25a-4516-b170-6b4033444233&pf_rd_p=f45dea16-f25a-4516-b170-6b4033444233&pf_rd_r=JZXV1E0QC1YTX1JDFV8G&pd_rd_wg=Qugrj&pd_rd_r=0923ad4b-c831-41d0-8b1d-37c98037a630)"; flow:established,to_server; http.uri; content:"/dp/B0FJQN788S/ref=mes-dp?_encoding=UTF8&pd_rd_w=8lftH&content-id=amzn1.sym.f45dea16-f25a-4516-b170-6b4033444233&pf_rd_p=f45dea16-f25a-4516-b170-6b4033444233&pf_rd_r=JZXV1E0QC1YTX1JDFV8G&pd_rd_wg=Qugrj&pd_rd_r=0923ad4b-c831-41d0-8b1d-37c98037a630"; startswith; fast_pattern; http.host; content:"d30sec8k5ond2x.cloudfront.net"; endswith; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6012512; classtype:social-engineering; sid:6012512; rev:1; metadata:signature_severity Major, created_et 2026_08_22;)

References

url	openphish.com
url	julioliraup.github.io/AT/signature.html?sid=6012512

References

Metadata

Comments (0)