AT related malicious URL (consultas-descontos .vercel .app/inicio/index .html?utm_source=FB&amp\;utm_campaign=P67-32-R2-R30%252Fnoemi+%25E2%2580%2594+C%25C3%25B3pia+%25E2%2580%2594+C%25C3%25B3pia+%25E2%2580%2594+C%25C3%25B3pia%257C120244351874680296&amp\;utm_medium=-%257C120244351874240296&amp\;utm_content=-%257C120244351874910296&amp\;utm_term=Instagram_Reels&amp\;utm_id=120244351874680296&amp\;fbclid=PAaWdyZARu8YVleHRuA2FlbQEwAGFkaWQBqzGZ7A8ayHNydGMGYXBwX2lkDzU2NzA2NzM0MzM1MjQyNwABp88OnWlS6QtyIQIMFB0NvVEQwf9_Mr0JHqKLipCQYHmc1qR1zSreusT6_A3n_aem_3SUrlGj0somy3UlIGb27oQ&amp\;twrclid=184719789929795584)

SID: 6001629Rev: 20 views
Sourcejulioliraup/antiphishing
CreatedMay 22, 2026
UpdatedMay 22, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (consultas-descontos .vercel .app/inicio/index .html?utm_source=FB&amp\;utm_campaign=P67-32-R2-R30%252Fnoemi+%25E2%2580%2594+C%25C3%25B3pia+%25E2%2580%2594+C%25C3%25B3pia+%25E2%2580%2594+C%25C3%25B3pia%257C120244351874680296&amp\;utm_medium=-%257C120244351874240296&amp\;utm_content=-%257C120244351874910296&amp\;utm_term=Instagram_Reels&amp\;utm_id=120244351874680296&amp\;fbclid=PAaWdyZARu8YVleHRuA2FlbQEwAGFkaWQBqzGZ7A8ayHNydGMGYXBwX2lkDzU2NzA2NzM0MzM1MjQyNwABp88OnWlS6QtyIQIMFB0NvVEQwf9_Mr0JHqKLipCQYHmc1qR1zSreusT6_A3n_aem_3SUrlGj0somy3UlIGb27oQ&amp\;twrclid=184719789929795584)"; flow:established,to_server; http.uri; content:"/inicio/index.html?utm_source=FB&amp|3b|utm_campaign=P67-32-R2-R30%252Fnoemi+%25E2%2580%2594+C%25C3%25B3pia+%25E2%2580%2594+C%25C3%25B3pia+%25E2%2580%2594+C%25C3%25B3pia%257C120244351874680296&amp|3b|utm_medium=-%257C120244351874240296&amp|3b|utm_content=-%257C120244351874910296&amp|3b|utm_term=Instagram_Reels&amp|3b|utm_id=120244351874680296&amp|3b|fbclid=PAaWdyZARu8YVleHRuA2FlbQEwAGFkaWQBqzGZ7A8ayHNydGMGYXBwX2lkDzU2NzA2NzM0MzM1MjQyNwABp88OnWlS6QtyIQIMFB0NvVEQwf9_Mr0JHqKLipCQYHmc1qR1zSreusT6_A3n_aem_3SUrlGj0somy3UlIGb27oQ&amp|3b|twrclid=184719789929795584"; startswith; fast_pattern; http.host; content:"consultas-descontos.vercel.app"; endswith; reference:url,phishstats.info; reference:url,github.com/julioliraup/Antiphishing; reference:url,julioliraup.github.io/ET/signature.html?sid=6001629; classtype:social-engineering; sid:6001629; rev:2; metadata:signature_severity Major, created_et 2026_05_12;)

References

urlphishstats.info
urlgithub.com/julioliraup/Antiphishing
urljulioliraup.github.io/ET/signature.html?sid=6001629

Metadata

signature severityMajor
created et2026_05_12

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!