AT related malicious URL (tax-filecenterccf9488af1d48a85307a32b4f739f2bb.lahmawy.com/era.php#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)

SID: 6019475Rev: 1EnabledDerived0 views
Fileantiphishing.rules
CreatedJuly 11, 2026
UpdatedJuly 11, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (tax-filecenterccf9488af1d48a85307a32b4f739f2bb.lahmawy.com/era.php#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)"; flow:established,to_server; http.uri; content:"/era.php#b41ef0a7ecadb0a1a07289aa4fcd609af4c109b7e016ccdb9de7650eca6b17b62c332bd5a8d3823b67b3406be4401228d195a798bb84bd402cf0efcccf46ab43f423f11b11d6461ae5177ccd9f0106ff018d8c39771e6cf85889c9e62f26def75e6f41403b0ec9b81ed4cafc48f368eaec9ebb2652ac126ab8d7d0990a77ea98c5333b5bc40b31c088dfb8646fe702e12fdb3b38576fb1258a768732f90834a9b23c5a43f8e23f2dbd24b8d05c2f398a056ea8ac2b65dfcb4b96e12eb46d7c2ffb087e7acfcd6cbe6c45e2a28d02fefd68cb2596fd9daa7143f9aab0865e0e70c23d67a12ee587ba11dadce85d6eb52489f2288bf9b0a9d4c38a"; startswith; fast_pattern; http.host; content:"tax-filecenterccf9488af1d48a85307a32b4f739f2bb.lahmawy.com"; endswith; reference:url,phishstats.info; reference:url,julioliraup.github.io/AT/signature.html?sid=6019475; classtype:social-engineering; sid:6019475; rev:1; metadata:signature_severity Major, created_et 2026_07_10;)

References

urlphishstats.info
urljulioliraup.github.io/AT/signature.html?sid=6019475

Metadata

signature severityMajor
created et2026_07_10

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!