alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - ℹ WhatsApp 📱 Mobile App"; flow:to_server, stateless; tls_sni; content:".fna.whatsapp.net"; endswith; nocase; reference:url,https://web.whatsapp.com/; metadata:created_at 2025_09_21, updated_at 2025_09_21; sid:3321471; rev:1; classtype:misc-activity;)