AT related malicious URL (url1402.nycamail.com/ls/click?upn=u001.O6jY7o9q5dogmtnrk4RHNyfiClE-2FdW0u4mVoJzQUWbl43jj-2Bk3VIt5wVfL10yYz8-2F0MlU5h4lHc0-2F527Vfp1Rg9WaAVbnT0lKyMb5-2ByVOkkzmc1loXcjwD00dBsi-2Bpuo1sN1BAVIzP14BCXPZIqxow-3D-3DbI1t_1K0sULVzZmD1Y43wkEC8mz1u4aiMsC3e7cQ11KiXIvDbtqxsJoY2t837YrWb3CJ66Dc0oauTwyQIkYg-2BmDnxee3FedFhlkMt3it9LlURYYXRS8hteDZed4heUotSWyPKKHChxN-2BeFymuOAtm-2FUIDFdN3QTOLkLTMKBpPBzavxdVfhdXPnRLnbLyzx4E3kFOUzPOx7mHrv-2B3MHYivnDmBkkTNRaEWqcBM55iYbdiPd21m0kEcQ8SZ2rj5ALr3hilz)

SID: 6014372Rev: 1EnabledDerived1 views
History
Fileantiphishing.rules
CreatedJune 19, 2026
UpdatedJune 25, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (url1402.nycamail.com/ls/click?upn=u001.O6jY7o9q5dogmtnrk4RHNyfiClE-2FdW0u4mVoJzQUWbl43jj-2Bk3VIt5wVfL10yYz8-2F0MlU5h4lHc0-2F527Vfp1Rg9WaAVbnT0lKyMb5-2ByVOkkzmc1loXcjwD00dBsi-2Bpuo1sN1BAVIzP14BCXPZIqxow-3D-3DbI1t_1K0sULVzZmD1Y43wkEC8mz1u4aiMsC3e7cQ11KiXIvDbtqxsJoY2t837YrWb3CJ66Dc0oauTwyQIkYg-2BmDnxee3FedFhlkMt3it9LlURYYXRS8hteDZed4heUotSWyPKKHChxN-2BeFymuOAtm-2FUIDFdN3QTOLkLTMKBpPBzavxdVfhdXPnRLnbLyzx4E3kFOUzPOx7mHrv-2B3MHYivnDmBkkTNRaEWqcBM55iYbdiPd21m0kEcQ8SZ2rj5ALr3hilz)"; flow:established,to_server; http.uri; content:"/ls/click?upn=u001.O6jY7o9q5dogmtnrk4RHNyfiClE-2FdW0u4mVoJzQUWbl43jj-2Bk3VIt5wVfL10yYz8-2F0MlU5h4lHc0-2F527Vfp1Rg9WaAVbnT0lKyMb5-2ByVOkkzmc1loXcjwD00dBsi-2Bpuo1sN1BAVIzP14BCXPZIqxow-3D-3DbI1t_1K0sULVzZmD1Y43wkEC8mz1u4aiMsC3e7cQ11KiXIvDbtqxsJoY2t837YrWb3CJ66Dc0oauTwyQIkYg-2BmDnxee3FedFhlkMt3it9LlURYYXRS8hteDZed4heUotSWyPKKHChxN-2BeFymuOAtm-2FUIDFdN3QTOLkLTMKBpPBzavxdVfhdXPnRLnbLyzx4E3kFOUzPOx7mHrv-2B3MHYivnDmBkkTNRaEWqcBM55iYbdiPd21m0kEcQ8SZ2rj5ALr3hilz"; startswith; fast_pattern; http.host; content:"url1402.nycamail.com"; endswith; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6014372; classtype:social-engineering; sid:6014372; rev:1; metadata:signature_severity Major, created_et 2026_06_19, updated_et 2026_06_25;)

References

urlopenphish.com
urljulioliraup.github.io/AT/signature.html?sid=6014372

Metadata

signature severityMajor
created et2026_06_19
updated et2026_06_25

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!