AT related malicious URL (dafi.biz.id/bmcc/R1Y9YE8368.php?ryb=amltQHRoZWppbWJ1cmtlZmFtaWx5LmNvbQ==&d6194aa1029e75a5e36d03e43ee054060f1684ec26b37e1796d5fa1a6233979988e5c4bfa277d3728f87510a1394dcf53cddc20a0648eaefa489f5bf67bf791536c8584b5b18e4dcb74dab2bccc712ef626c5002df90d9ad8232=)

SID: 6007788Rev: 1EnabledDerived2 views
History
Fileantiphishing.rules
CreatedMay 27, 2026
UpdatedJune 25, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (dafi.biz.id/bmcc/R1Y9YE8368.php?ryb=amltQHRoZWppbWJ1cmtlZmFtaWx5LmNvbQ==&d6194aa1029e75a5e36d03e43ee054060f1684ec26b37e1796d5fa1a6233979988e5c4bfa277d3728f87510a1394dcf53cddc20a0648eaefa489f5bf67bf791536c8584b5b18e4dcb74dab2bccc712ef626c5002df90d9ad8232=)"; flow:established,to_server; http.uri; content:"/bmcc/R1Y9YE8368.php?ryb=amltQHRoZWppbWJ1cmtlZmFtaWx5LmNvbQ==&d6194aa1029e75a5e36d03e43ee054060f1684ec26b37e1796d5fa1a6233979988e5c4bfa277d3728f87510a1394dcf53cddc20a0648eaefa489f5bf67bf791536c8584b5b18e4dcb74dab2bccc712ef626c5002df90d9ad8232="; startswith; fast_pattern; http.host; content:"dafi.biz.id"; endswith; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6007788; classtype:social-engineering; sid:6007788; rev:1; metadata:signature_severity Major, created_et 2026_05_27, updated_et 2026_06_25;)

References

urlopenphish.com
urljulioliraup.github.io/AT/signature.html?sid=6007788

Metadata

signature severityMajor
created et2026_05_27
updated et2026_06_25

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!