AT related malicious URL (post.spmailtechnol.com/f/a/Ggazz4kQfQscKFR_2WfvaA~~/AACPmBA~/-2zJpDSCRbBm-_-3D0nmvf1yHP6sbzyvVoLMoOL1-BgFHFBvGn78L0_ZqfGiQV7Nzovfa9Plw2hbXToM6hQkBNjmlzklz3cn3dCGZcCMwgMnph7kyhp-S0xO6Efvltxd6LpobKWKedlAlKdxo_0p6C2y5Df47m4yOxiF6E4b3sDHe44-pKyaupqXOLqFrwd-QTsHfO7ZLkmGm1wfAscVDsMPoUxXzIq9WpkXAGm0n6s~)

SID: 6019843Rev: 1EnabledDerived0 views
Fileantiphishing.rules
CreatedJuly 11, 2026
UpdatedJuly 11, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (post.spmailtechnol.com/f/a/Ggazz4kQfQscKFR_2WfvaA~~/AACPmBA~/-2zJpDSCRbBm-_-3D0nmvf1yHP6sbzyvVoLMoOL1-BgFHFBvGn78L0_ZqfGiQV7Nzovfa9Plw2hbXToM6hQkBNjmlzklz3cn3dCGZcCMwgMnph7kyhp-S0xO6Efvltxd6LpobKWKedlAlKdxo_0p6C2y5Df47m4yOxiF6E4b3sDHe44-pKyaupqXOLqFrwd-QTsHfO7ZLkmGm1wfAscVDsMPoUxXzIq9WpkXAGm0n6s~)"; flow:established,to_server; http.uri; content:"/f/a/Ggazz4kQfQscKFR_2WfvaA~~/AACPmBA~/-2zJpDSCRbBm-_-3D0nmvf1yHP6sbzyvVoLMoOL1-BgFHFBvGn78L0_ZqfGiQV7Nzovfa9Plw2hbXToM6hQkBNjmlzklz3cn3dCGZcCMwgMnph7kyhp-S0xO6Efvltxd6LpobKWKedlAlKdxo_0p6C2y5Df47m4yOxiF6E4b3sDHe44-pKyaupqXOLqFrwd-QTsHfO7ZLkmGm1wfAscVDsMPoUxXzIq9WpkXAGm0n6s~"; startswith; fast_pattern; http.host; content:"post.spmailtechnol.com"; endswith; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6019843; classtype:social-engineering; sid:6019843; rev:1; metadata:signature_severity Major, created_et 2026_07_11;)

References

urlopenphish.com
urljulioliraup.github.io/AT/signature.html?sid=6019843

Metadata

signature severityMajor
created et2026_07_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!