alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 Nokia 📱 Mobile - Android 🤖"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; tls_sni; content:!"www."; nocase; startswith; content:".hmdglobal.com"; nocase; metadata:created_at 2022_03_19, updated_at 2022_08_02; sid:3300233; rev:2; classtype:policy-violation;)