AT related malicious URL (click2prize.com/walmart1000v4/cz.html?lptoken=171c83fc6672082f1805&cep=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&cpid=69a00b6213d91100122a1b7f)

SID: 6019691Rev: 1EnabledDerived0 views
Fileantiphishing.rules
CreatedJuly 11, 2026
UpdatedJuly 11, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (click2prize.com/walmart1000v4/cz.html?lptoken=171c83fc6672082f1805&cep=N4Igdgpg7g+gFgSwC4wQExALhBAHGgBgDMAWAkgWgIDYB2NCk+gigIxIgYGYIICBGAIYl+EAKxFWIADQgAbggDOyVBmy5a/WrWH8KELmgDGjLgS4VBATgIQKpXGNZHeYsYLEz5SlUgQBbCEUkQX8ABywQACYCKOoqWgp+AgAVckwxAkx+XAA6EmoogC0vBWUkAHsAJ1VI8iirbX4rJKj+EzIuXAorIxoKWhoualZWXD7iLyNQsMEEAHMwWuxqK0ECAlZC/kMrfmSBKKjBflZaIi8wCrQIZZACGH5L69ukAE8wiEiAGUEwNAQYHmzxuMCMcDmYCwAG17o8QABdWRhKpBCAAGwgRiQnBgVxuWFA70+Pz+AKBXhCVXmEBQ6Ei1FwNjiHGIYnGmUOjOo4isINu9OwDyeskgAA8kISQMSvtgAPJEIgQKqUwTU2l3VbrHY7QS0VbUA78OLUcxGIz8u4Pa0wGDCu0waiXCASrBgACu6PRAF9vbJwZCYGEKuUEBUoZhQEZ3VVUWAkAA5F4ASX+LqwBFkrCqf3BqYBLkUMIRfpAShgqIBqOxWCQVXdEFkAEdFBFI6Xy5AoFgiIJ0YoIN6gA==&cpid=69a00b6213d91100122a1b7f)"; flow:established,to_server; http.uri; content:"/walmart1000v4/cz.html?lptoken=171c83fc6672082f1805&cep=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&cpid=69a00b6213d91100122a1b7f"; startswith; fast_pattern; http.host; content:"click2prize.com"; endswith; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6019691; classtype:social-engineering; sid:6019691; rev:1; metadata:signature_severity Major, created_et 2026_07_10;)

References

urlopenphish.com
urljulioliraup.github.io/AT/signature.html?sid=6019691

Metadata

signature severityMajor
created et2026_07_10

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!