AT related malicious URL (qkbzp.com/newlp/news2.html?lptoken=173a917a186314438937&cep=N4Igdgpg7g%2BgFgSwC4wQExALhGtEICMAZgOwCcAtKWgCwU0Rl1lol0FoEAMARgEwkAxgDYIXDABoQANwQBnZKgzY%2BgohACGRLgFYKQ4UXppBaCgA4CEYRQhEyGkkTREeENMJBTZClEgQAthBySBoBAA5YIHxcfDbcFLoAKrqYOjSYNGQAdADMBDoAWl4gEAAeSBAATmAaADZKUcCCdQiCANZKAL4lPsgA9lWN2MKCPOqGZoS5dDTCXJQOJCQUSzrmbAQaPBoEJYJh4RoIAOZgwyDCGubOnDzC94Lm81wEfATCOnwQJCVg%2FXgLlwYHwQX8ARAYEgAJ7hCBRAAyGjAaAQYBO4MBgjgxzAWAA2iBgaC%2BCAALpScJVYIQOoQQSVNAwf54LCgGFwxHI1HokqhKonCAodBRK4aQT4dw0HRWGhceVvETEGjmTGQkXYYlgqSQCpskAc%2BHYADyRHUVT5GgFQouVx4WT44vGkvMCpiGmE5kYaqBIJgwOB%2Fr9BCDQZJQb2OvKSCwYAArnU6l0ulJsbiYOF%2Br4EP08ZhQII41VqWAkAA5CEASRR5SwXCkPCqyOx1dRErkBLJKZA8hg1NR1IZWCQVTjECkAEc5JF8yAWm1OhqQM1Wh1uvtqRp%2FNJ1cpl4JN9vdz0pBo0NIYAcIsczhdgGeL1ejqdzugT3PDwgd8ywkb95%2Fv1qIJ3zjOMl2AUC3xKB8YH6M1qjvGC4PNdcpGQhCgL%2FYB0KGTD3y0IgEFaLddyaAiiIQEjUJ7FwNCadAiA0d85EEKIAFkkgAcRgFICBof1chKE5jj3YBhKgqRxKZAI0B0JopJgGSdHfQIIAQeiggQFTNMU2SNLU3TlOglEqn6dBEJMsymQkkBuVM8zzKUsjLIc6TZPfAJxSaTzBA88VDO8%2FylPffoRKaUKbIity5OwbCRMMkC6NiuMmJAbte0gKAsEYuo5AgLogA%3D%3D%3D&cpid=6a8fdd1b6b6c8600121652e7)

SID: 6027063Rev: 1EnabledDerived0 views
Fileantiphishing.rules
CreatedOctober 15, 2026
UpdatedOctober 15, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (qkbzp.com/newlp/news2.html?lptoken=173a917a186314438937&cep=N4Igdgpg7g%2BgFgSwC4wQExALhGtEICMAZgOwCcAtKWgCwU0Rl1lol0FoEAMARgEwkAxgDYIXDABoQANwQBnZKgzY%2BgohACGRLgFYKQ4UXppBaCgA4CEYRQhEyGkkTREeENMJBTZClEgQAthBySBoBAA5YIHxcfDbcFLoAKrqYOjSYNGQAdADMBDoAWl4gEAAeSBAATmAaADZKUcCCdQiCANZKAL4lPsgA9lWN2MKCPOqGZoS5dDTCXJQOJCQUSzrmbAQaPBoEJYJh4RoIAOZgwyDCGubOnDzC94Lm81wEfATCOnwQJCVg%2FXgLlwYHwQX8ARAYEgAJ7hCBRAAyGjAaAQYBO4MBgjgxzAWAA2iBgaC%2BCAALpScJVYIQOoQQSVNAwf54LCgGFwxHI1HokqhKonCAodBRK4aQT4dw0HRWGhceVvETEGjmTGQkXYYlgqSQCpskAc%2BHYADyRHUVT5GgFQouVx4WT44vGkvMCpiGmE5kYaqBIJgwOB%2Fr9BCDQZJQb2OvKSCwYAArnU6l0ulJsbiYOF%2Br4EP08ZhQII41VqWAkAA5CEASRR5SwXCkPCqyOx1dRErkBLJKZA8hg1NR1IZWCQVTjECkAEc5JF8yAWm1OhqQM1Wh1uvtqRp%2FNJ1cpl4JN9vdz0pBo0NIYAcIsczhdgGeL1ejqdzugT3PDwgd8ywkb95%2Fv1qIJ3zjOMl2AUC3xKB8YH6M1qjvGC4PNdcpGQhCgL%2FYB0KGTD3y0IgEFaLddyaAiiIQEjUJ7FwNCadAiA0d85EEKIAFkkgAcRgFICBof1chKE5jj3YBhKgqRxKZAI0B0JopJgGSdHfQIIAQeiggQFTNMU2SNLU3TlOglEqn6dBEJMsymQkkBuVM8zzKUsjLIc6TZPfAJxSaTzBA88VDO8%2FylPffoRKaUKbIity5OwbCRMMkC6NiuMmJAbte0gKAsEYuo5AgLogA%3D%3D%3D&cpid=6a8fdd1b6b6c8600121652e7)"; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6027063; classtype:social-engineering; sid:6027063; rev:1; metadata:signature_severity Major, created_et 2026_10_15;)
Detection details are hidden.

References

urlopenphish.com
urljulioliraup.github.io/AT/signature.html?sid=6027063

Metadata

signature severityMajor
created et2026_10_15

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!