alert tls any any -> any any (msg:"🐾 - 🚨 HTTPS 🕵 scan 🎩 Joomscan 👨‍💻"; flow:to_server, stateless; ja3.hash; content:"f1b9b751b665449f1ce77721b0487b69"; tls.sni; content:!"www.onyphe.io"; metadata:former_category JA3; reference:url,https://github.com/OWASP/joomscan; metadata:created_at 2022_08_08, updated_at 2023_03_27; sid:3300189; rev:2; classtype:policy-violation;)