AT related malicious URL (horny-honey.online/click.php?key=0bbrv2yn6n2cz03owl0h&ext=gecg0b2gX206eXd2eeXie05X2b55id33ff44JaghcabfcfdJbg0i0hJeciegffJdghacedJdgidgefJhd0Ja00JfJiiiiJb0bJbe&v1=c11001&v2=270908&v3=5395766&v4=4781354_4794756&v5=US_5&v6=mobile%20phone&v7=android&v8=9999&v9=4781354&v10=4794756)

SID: 6017515Rev: 1EnabledDerived0 views
Fileantiphishing.rules
CreatedJuly 4, 2026
UpdatedJuly 4, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (horny-honey.online/click.php?key=0bbrv2yn6n2cz03owl0h&ext=gecg0b2gX206eXd2eeXie05X2b55id33ff44JaghcabfcfdJbg0i0hJeciegffJdghacedJdgidgefJhd0Ja00JfJiiiiJb0bJbe&v1=c11001&v2=270908&v3=5395766&v4=4781354_4794756&v5=US_5&v6=mobile%20phone&v7=android&v8=9999&v9=4781354&v10=4794756)"; flow:established,to_server; http.uri; content:"/click.php?key=0bbrv2yn6n2cz03owl0h&ext=gecg0b2gX206eXd2eeXie05X2b55id33ff44JaghcabfcfdJbg0i0hJeciegffJdghacedJdgidgefJhd0Ja00JfJiiiiJb0bJbe&v1=c11001&v2=270908&v3=5395766&v4=4781354_4794756&v5=US_5&v6=mobile%20phone&v7=android&v8=9999&v9=4781354&v10=4794756"; startswith; fast_pattern; http.host; content:"horny-honey.online"; endswith; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6017515; classtype:social-engineering; sid:6017515; rev:1; metadata:signature_severity Major, created_et 2026_07_04;)

References

urlopenphish.com
urljulioliraup.github.io/AT/signature.html?sid=6017515

Metadata

signature severityMajor
created et2026_07_04

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!