AT related malicious URL (im.savemorelab.com/walmart/walmart_260420_v1.html?lptoken=179586a0801976df0705&cep=N4Igdgpg7g+gFgSwC4wQExALhADgAwBsATDhEQKwC0ALAIyE0DGaOlAnAOyMSUCGOaIgTYAjanjTVeIADQgAbggDOyVBmwiOeAMwRG/Gh21sm5AGaUcjEUUrlGDtCJEsibDHMUqUSBAFsIJSRePwAHLBAiPCFKPFZacgAVWmpMcgJMag4AOnI2WgAtWRAIAA8kCAAnMF4AGzUI4EZahEYAazUAX2KvZAB7SobsIjNqIl4OEVYCam1tGl4iakoRRgJGSghOcg4Utmo2CBxi/TDeBABzMCGQYQhyCG0CHZwbHC08WiIEtDZtY7kYD6aAgNzwxSBIJgSAAnqEIBEADK8MBoBBgC4Q4Ggxhwc5gLAAbRA4IAunJQpVAhBanoKmgYJCEZhQLD4UiUWiMcVgpULhAUOgIncHhQ2GwzNpFgQ8J8ongRGYINJAdiwRCykgsKy4cyQAB5MxKyo83h8gU3EUQWi8ahoRg4LLkWVfOaMPDUchYqFC7B4GDgwGarBgACutVqnU6clx+JgoT63gQfQJLJAjFDlSpYCQADlsQBJVFlLB4OQiSoo3FFtHcJRE0nRkDKGBUtFUxhazBISqhiByACOSnCaearQ6vpATRa7S6JypvF88lBk6aC6XK7Q3TkvDQ8hgp1C5yuN2Au/3h+P13Q2/T64Qy8ZIT1a+VG6fAVvodDq+/N+K54wH0RpVKegHAcac5yBBoE1AEjQwYMcEQLevBGggLSLpujRoWYGEIFhUHNmgZjSNgwDoKRt6UbwMB+GgXrkTRdEMbeFznOoU7sf+cjcQy9GMVxHEseQ1EBAgjT+BACBidJImSeJImoailR9OgYEqWpDI8SAnKqep6kCThmkGfxrHFH4vCMI0lmMLetnyeRDkCbefQcQhHGucJRnkW5hnmXIoZkVOQXdE2LaQFAWCkbUSgoUAA=&cpid=69e5e36578b287001215d938)

SID: 6010519Rev: 1EnabledDerived1 views
History
Fileantiphishing.rules
CreatedAugust 16, 2026
UpdatedAugust 16, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (im.savemorelab.com/walmart/walmart_260420_v1.html?lptoken=179586a0801976df0705&cep=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&cpid=69e5e36578b287001215d938)"; flow:established,to_server; http.uri; content:"/walmart/walmart_260420_v1.html?lptoken=179586a0801976df0705&cep=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&cpid=69e5e36578b287001215d938"; startswith; fast_pattern; http.host; content:"im.savemorelab.com"; endswith; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6010519; classtype:social-engineering; sid:6010519; rev:1; metadata:signature_severity Major, created_et 2026_08_16;)

References

urlopenphish.com
urljulioliraup.github.io/AT/signature.html?sid=6010519

Metadata

signature severityMajor
created et2026_08_16

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!