AT related malicious URL (www.gflottery.com/walmart1k/?lptoken=171683db573926b765ac&cep=N4Igdgpg7g%2BgFgSwC4wQExALhAZgBwCMeATGgQKwC0BEJlALOQOwCGlAnC%2B2pRHwMb087eu3IsIIADQgAbggDOyVBmz8CBfsXq1K5PPQBmDegCNiHQ2gBslJk2tpyh%2FnhYEWOaXMXKkCAFsIBSQWAIAHLBBiAAZiWximShj2ABUY%2BkxiAkwY8gA6GIJrAC1vCAAPJAgAJzAWABsVKIBhAEkAa3CAIQB1ACU0AAUAaQD6DoCW2QA1OABVPAAZAFkEft75%2FoglgFFrCog2llkAMXYS7rb%2BgEcWXfIRygRZboUARQArSnT5gFd%2Bh0bgBxDoAOX4ACkOmgAJ4rCqpDoVAD2AHluqk%2FoYABp4AAS9AAyitZDEcH8AF44gIsAAilN2%2FAA5jjvPIlEgUTVmthTBlhOSeHhnPwGIZyBBKKYzGxJUwxMJiORyEVvPwwuEWAhmWBeSBrOxaEw0HgmPQNewcDgYkViPxTBAcOx%2BN4wCi0BB9TE3R6vUhYeFJNgliwwGgEGBmb7PTB%2BHBtWAsABtEA%2BgC6MnCNWCEAaEH41TQMHdnqwoADQaiofDkejMlCNWZEBQ6CihtMLAtaFcyoIpFt%2FfYMTwjtdMlLXrb2B9E8qSHLIErwZAaMMhlq3kbzdbqgN7GK7FM5AItog9BY%2FLtHmKJ5jU73MRgT9n4HnWDAfwaDQAvj%2BZPGiYwOEKKcggKJJpgoD8H8NQ5mASBgn6bThpUWAxDIpg1GG8YoRG%2FDBCm6b%2FiAigwDmEY5oWWBIDUfwQDINwKJEUEgAofymAQrSdD0AzDGMExTLMCzLGsGxbDs%2ByHMcZwXFctz3I8zyvB83y%2FACQKghC0JwgiSKohiWK4gSxKkuSVI0vSjIsmyJFkZAUBYIYjQKBAP5AA%3D%3D%3D&cpid=69e87d874ca9330012cbe39c)

SID: 6018947Rev: 1EnabledDerived1 views
Fileantiphishing.rules
CreatedJuly 9, 2026
UpdatedJuly 9, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (www.gflottery.com/walmart1k/?lptoken=171683db573926b765ac&cep=N4Igdgpg7g%2BgFgSwC4wQExALhAZgBwCMeATGgQKwC0BEJlALOQOwCGlAnC%2B2pRHwMb087eu3IsIIADQgAbggDOyVBmz8CBfsXq1K5PPQBmDegCNiHQ2gBslJk2tpyh%2FnhYEWOaXMXKkCAFsIBSQWAIAHLBBiAAZiWximShj2ABUY%2BkxiAkwY8gA6GIJrAC1vCAAPJAgAJzAWABsVKIBhAEkAa3CAIQB1ACU0AAUAaQD6DoCW2QA1OABVPAAZAFkEft75%2FoglgFFrCog2llkAMXYS7rb%2BgEcWXfIRygRZboUARQArSnT5gFd%2Bh0bgBxDoAOX4ACkOmgAJ4rCqpDoVAD2AHluqk%2FoYABp4AAS9AAyitZDEcH8AF44gIsAAilN2%2FAA5jjvPIlEgUTVmthTBlhOSeHhnPwGIZyBBKKYzGxJUwxMJiORyEVvPwwuEWAhmWBeSBrOxaEw0HgmPQNewcDgYkViPxTBAcOx%2BN4wCi0BB9TE3R6vUhYeFJNgliwwGgEGBmb7PTB%2BHBtWAsABtEA%2BgC6MnCNWCEAaEH41TQMHdnqwoADQaiofDkejMlCNWZEBQ6CihtMLAtaFcyoIpFt%2FfYMTwjtdMlLXrb2B9E8qSHLIErwZAaMMhlq3kbzdbqgN7GK7FM5AItog9BY%2FLtHmKJ5jU73MRgT9n4HnWDAfwaDQAvj%2BZPGiYwOEKKcggKJJpgoD8H8NQ5mASBgn6bThpUWAxDIpg1GG8YoRG%2FDBCm6b%2FiAigwDmEY5oWWBIDUfwQDINwKJEUEgAofymAQrSdD0AzDGMExTLMCzLGsGxbDs%2ByHMcZwXFctz3I8zyvB83y%2FACQKghC0JwgiSKohiWK4gSxKkuSVI0vSjIsmyJFkZAUBYIYjQKBAP5AA%3D%3D%3D&cpid=69e87d874ca9330012cbe39c)"; flow:established,to_server; http.uri; content:"/walmart1k/?lptoken=171683db573926b765ac&cep=N4Igdgpg7g%2BgFgSwC4wQExALhAZgBwCMeATGgQKwC0BEJlALOQOwCGlAnC%2B2pRHwMb087eu3IsIIADQgAbggDOyVBmz8CBfsXq1K5PPQBmDegCNiHQ2gBslJk2tpyh%2FnhYEWOaXMXKkCAFsIBSQWAIAHLBBiAAZiWximShj2ABUY%2BkxiAkwY8gA6GIJrAC1vCAAPJAgAJzAWABsVKIBhAEkAa3CAIQB1ACU0AAUAaQD6DoCW2QA1OABVPAAZAFkEft75%2FoglgFFrCog2llkAMXYS7rb%2BgEcWXfIRygRZboUARQArSnT5gFd%2Bh0bgBxDoAOX4ACkOmgAJ4rCqpDoVAD2AHluqk%2FoYABp4AAS9AAyitZDEcH8AF44gIsAAilN2%2FAA5jjvPIlEgUTVmthTBlhOSeHhnPwGIZyBBKKYzGxJUwxMJiORyEVvPwwuEWAhmWBeSBrOxaEw0HgmPQNewcDgYkViPxTBAcOx%2BN4wCi0BB9TE3R6vUhYeFJNgliwwGgEGBmb7PTB%2BHBtWAsABtEA%2BgC6MnCNWCEAaEH41TQMHdnqwoADQaiofDkejMlCNWZEBQ6CihtMLAtaFcyoIpFt%2FfYMTwjtdMlLXrb2B9E8qSHLIErwZAaMMhlq3kbzdbqgN7GK7FM5AItog9BY%2FLtHmKJ5jU73MRgT9n4HnWDAfwaDQAvj%2BZPGiYwOEKKcggKJJpgoD8H8NQ5mASBgn6bThpUWAxDIpg1GG8YoRG%2FDBCm6b%2FiAigwDmEY5oWWBIDUfwQDINwKJEUEgAofymAQrSdD0AzDGMExTLMCzLGsGxbDs%2ByHMcZwXFctz3I8zyvB83y%2FACQKghC0JwgiSKohiWK4gSxKkuSVI0vSjIsmyJFkZAUBYIYjQKBAP5AA%3D%3D%3D&cpid=69e87d874ca9330012cbe39c"; startswith; fast_pattern; http.host; content:"www.gflottery.com"; endswith; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6018947; classtype:social-engineering; sid:6018947; rev:1; metadata:signature_severity Major, created_et 2026_07_09;)

References

urlopenphish.com
urljulioliraup.github.io/AT/signature.html?sid=6018947

Metadata

signature severityMajor
created et2026_07_09

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!