AT DNS query to suspicious domain - Phishing - Suricata Rule 6000000 (julioliraup/antiphishing)

AT DNS query to suspicious domain - Phishing

SID: 6000000Rev: 10 views

Sourcejulioliraup/antiphishing

CreatedMay 22, 2026

UpdatedMay 22, 2026

Classificationsocial-engineering

alert dns $HOME_NET any -> any any (msg:"AT DNS query to suspicious domain - Phishing"; dns.query; dataset:isset,phishing_domains,type string; reference:url,github.com/julioliraup/Antiphishing; classtype:social-engineering; sid:6000000; rev:1; metadata:signature_severity Major, created_et 2025_02_19;)

References

url	github.com/julioliraup/Antiphishing

Metadata

signature severityMajor

created et2025_02_19

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!