alert tls $HOME_NET any -> any any (msg:"🐾 - 🚨 Go HTTP Client 🌐"; flow:to_server, stateless; ja3.hash; content:"df669e7ea913f1ac0c0cce9a201a2ec1"; fast_pattern; tls_sni; content:!"assist.zoho"; content:!"api.snapcraft.io"; endswith; content:!"snapcraftcontent.com"; endswith; content:!"zohoassist.com"; endswith; content:!"zoho.eu"; endswith; metadata:former_category JA3; reference:url,https://golangexample.com/http-client-for-golang/; metadata:created_at 2021_08_23, updated_at 2023_12_27; sid:3300204; rev:13; classtype:policy-violation;)