AT related malicious URL (creators.claimskinevents.com/?ttclid=E_C_P_CsQBx9UG71aASG2jW1sq5fhXK9WAlT5KHGG3ljThOYsEljbXbdjMdx_3-cGsDIGsyrH27jQpSa8sZgjm87rpY30kstpR-2NvfSM6HpZ2K7x28YP5yhQc-VOxeID4BARdT9XiAhImlwQqpb5Cbpvmm6K1f_36DGq7jr19khwy31kNdG7agDRJnYT1ElidjrJyXziQDx1lrW34WSiUsb_et2P1fEMFC7CfEF6ygoCXk4XaVIv0WKb2ANqKL0xTZ9vqqx6ZXUuEAxIEdjIuMA)

SID: 6037187Rev: 1EnabledDerived0 views
Fileantiphishing.rules
CreatedNovember 12, 2026
UpdatedNovember 12, 2026
Classificationsocial-engineering
alert http $HOME_NET any -> any any (msg:"AT related malicious URL (creators.claimskinevents.com/?ttclid=E_C_P_CsQBx9UG71aASG2jW1sq5fhXK9WAlT5KHGG3ljThOYsEljbXbdjMdx_3-cGsDIGsyrH27jQpSa8sZgjm87rpY30kstpR-2NvfSM6HpZ2K7x28YP5yhQc-VOxeID4BARdT9XiAhImlwQqpb5Cbpvmm6K1f_36DGq7jr19khwy31kNdG7agDRJnYT1ElidjrJyXziQDx1lrW34WSiUsb_et2P1fEMFC7CfEF6ygoCXk4XaVIv0WKb2ANqKL0xTZ9vqqx6ZXUuEAxIEdjIuMA)"; flow:established,to_server; http.uri; content:"/?ttclid=E_C_P_CsQBx9UG71aASG2jW1sq5fhXK9WAlT5KHGG3ljThOYsEljbXbdjMdx_3-cGsDIGsyrH27jQpSa8sZgjm87rpY30kstpR-2NvfSM6HpZ2K7x28YP5yhQc-VOxeID4BARdT9XiAhImlwQqpb5Cbpvmm6K1f_36DGq7jr19khwy31kNdG7agDRJnYT1ElidjrJyXziQDx1lrW34WSiUsb_et2P1fEMFC7CfEF6ygoCXk4XaVIv0WKb2ANqKL0xTZ9vqqx6ZXUuEAxIEdjIuMA"; startswith; fast_pattern; http.host; content:"creators.claimskinevents.com"; endswith; reference:url,openphish.com; reference:url,julioliraup.github.io/AT/signature.html?sid=6037187; classtype:social-engineering; sid:6037187; rev:1; metadata:signature_severity Major, created_et 2026_11_12;)

References

urlopenphish.com
urljulioliraup.github.io/AT/signature.html?sid=6037187

Metadata

signature severityMajor
created et2026_11_12

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!